Unscored CVE-2002-2128 EUVD-2002-2107GHSA-qrqj-x9m6-gcv5

editform.php in w-Agora 4.1.5 allows local users to execute arbitrary PHP code via .. (dot dot) sequences in the file parameter.

Published Nov 16, 2005 · Updated Sep 16, 2024 · Assigned by mitre

Description

editform.php in w-Agora 4.1.5 allows local users to execute arbitrary PHP code via .. (dot dot) sequences in the file parameter.

References

wagora-editform-file-include(10919) vdb-entry
6463 vdb-entry
20021219 XSS and PHP include bug in W-Agora mailing-list
20021220 Re: XSS and PHP include bug in W-Agora mailing-list