Description
list.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP request, possibly involving a malformed id parameter.
References
- 1011463 vdb-entry
- 12695 third-party-advisory
- 11283 vdb-entry
- 20040930 Multiple vulnerabilities in w-agora forum mailing-list
- 20040930 Multiple vulnerabilities in w-agora forum mailing-list