PT-2001-2334 · Agora · Agora

CVE-2001-1199 · Publicado 2001-12-17 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Agora versions 3.0a through 4.0g

Description The issue allows remote attackers to execute Javascript on other clients via the cart id parameter in agora.cgi when debug mode is enabled. This occurs because of a cross-site scripting issue.

Recommendations For Agora versions 3.0a through 4.0g, consider disabling debug mode in agora.cgi to prevent exploitation until a patch is available. Additionally, restrict access to the cart id parameter to minimize the risk of malicious script execution.

Exploit

Correção

Identificadores relacionados

CVE-2001-1199

Produtos afetados

Agora

Referências · 7

• 🔥 http://securityfocus.com/bid/3702 · Exploit
• 🔥 https://exploit-db.com/exploits/21184 · Exploit
• http://agoracgi.com/security.html · Nota
• http://osvdb.org/698 · Nota
• http://securityfocus.com/archive/1/246044 · Aviso do Fabricante
• http://iss.net/security_center/static/7708.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1199 · Nota de Segurança