İçeriğe atla
Noroxi

w-agora kayıtları

w-agora üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
8
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    19 kayıt
    • CVE-2007-1604
      31İzleyin

      Multiple unrestricted file upload vulnerabilities in w-Agora (Web-Agora) allow remote attackers to upload and execute arbitrary PHP code (1)

      YüksekCVSS 7,5Kavram kanıtıEPSS %3

      w-agora · w-agora22 Mar 2007

    • CVE-2010-4867
      31İzleyin

      Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to include and execut

      YüksekCVSS 7,5Kavram kanıtıEPSS %2

      w-agora · w-agora5 Eki 2011

    • CVE-2008-1466
      31İzleyin

      Multiple PHP remote file inclusion vulnerabilities in W-Agora 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the bn_d

      YüksekCVSS 7,5Kavram kanıtıEPSS %2

      w-agora · w-agora24 Mar 2008

    • CVE-2004-1562
      30İzleyin

      SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL commands via the key paramet

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      w-agora · w-agora31 Ara 2004

    • CVE-2007-6647
      30İzleyin

      SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      w-agora · w-agora4 Oca 2008

    • CVE-2004-1564
      22İzleyin

      CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to

      OrtaCVSS 5,0Kavram kanıtıEPSS %6

      w-agora · w-agora31 Ara 2004

    • CVE-2005-2648
      21İzleyin

      Directory traversal vulnerability in index.php in W-Agora 4.2.0 and earlier allows remote attackers to read arbitrary files via the site par

      OrtaCVSS 5,0Kavram kanıtıEPSS %3

      w-agora · w-agora23 Ağu 2005

    • CVE-2002-1878
      21İzleyin

      PHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote attackers to execute arbitrary PHP code via the inc_dir parameter.

      OrtaCVSS 5,0Kavram kanıtıEPSS %2

      w-agora · w-agora31 Ara 2002

    • CVE-2007-1607
      21İzleyin

      search.php in w-Agora (Web-Agora) allows remote attackers to obtain potentially sensitive information via a ' (quote) value followed by cert

      OrtaCVSS 5,0İstismar yokEPSS %2

      w-agora · w-agora22 Mar 2007

    • CVE-2004-1565
      21İzleyin

      list.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP request, possibly involving a malformed id par

      OrtaCVSS 5,0İstismar yokEPSS %2

      w-agora · w-agora31 Ara 2004

    • CVE-2007-1605
      21İzleyin

      w-Agora (Web-Agora) allows remote attackers to obtain sensitive information via a request to rss.php with an invalid (1) site or (2) bn para

      OrtaCVSS 5,0İstismar yokEPSS %1

      w-agora · w-agora22 Mar 2007

    • CVE-2007-0606
      20İzleyin

      w-agora 4.2.1 allows remote attackers to obtain sensitive information by via the (1) bn[] array parameter to index.php, which expects a stri

      OrtaCVSS 5,0İstismar yokEPSS %1

      w-agora · w-agora21 Mar 2007

    • CVE-2002-2129
      18İzleyin

      Cross-site scripting vulnerability (XSS) in editform.php for w-Agora 4.1.5 allows remote attackers to execute arbitrary web script via an ar

      OrtaCVSS 4,3Kavram kanıtıEPSS %3

      w-agora · w-agora31 Ara 2002

    • CVE-2006-2228
      18İzleyin

      Cross-site scripting (XSS) vulnerability in w-Agora (aka Web-Agora) 4.2.0 allows remote attackers to inject arbitrary web script or HTML via

      OrtaCVSS 4,3Kavram kanıtıEPSS %2

      w-agora · w-agora5 May 2006

    • CVE-2007-1606
      18İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in w-Agora (Web-Agora) allow remote attackers to inject arbitrary web script or HTML via

      OrtaCVSS 4,3Kavram kanıtıEPSS %2

      w-agora · w-agora22 Mar 2007

    • CVE-2004-1563
      18İzleyin

      Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web script or HTML via the

      OrtaCVSS 4,3Kavram kanıtıEPSS %2

      w-agora · w-agora31 Ara 2004

    • CVE-2002-2128
      18İzleyin

      editform.php in w-Agora 4.1.5 allows local users to execute arbitrary PHP code via ..

      OrtaCVSS 4,6İstismar yokEPSS %0

      w-agora · w-agora31 Ara 2002

    • CVE-2010-4868
      17İzleyin

      Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to inject arbi

      OrtaCVSS 4,3Kavram kanıtıEPSS %1

      w-agora · w-agora5 Eki 2011

    • CVE-2007-0607
      17İzleyin

      W-Agora (Web-Agora) 4.2.1, when register_globals is enabled, stores globals.inc under the web document root with insufficient access control

      OrtaCVSS 4,3İstismar yokEPSS %1

      w-agora · w-agora20 Mar 2007