medium5.0Public exploit code
CVE-2002-0215
Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Agora.CGI 3/4 - Debug Mode Full Path Disclosure2002-01-28 · remote · cgi · Verified
Impact
Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Steve Kneizys | Agora.Cgi | Versions 3.2, 3.2a, 3.2b, 3.2c, 3.2d, 3.2e |