W-agora : Security vulnerabilities, CVEs xss, cross site scripting published in 2007

CVE-2007-1606

Multiple cross-site scripting (XSS) vulnerabilities in w-Agora (Web-Agora) allow remote attackers to inject arbitrary web script or HTML via (1) the showuser parameter to profile.php, the (2) search_forum or (3) search_user parameter to search.php, or (4) the userid parameter to change_password.php.

Max CVSS

4.3

EPSS Score

0.70%

Published

2007-03-22

Updated

2018-10-16

1 vulnerabilities found

W-agora : Security Vulnerabilities, CVEs, Published In 2007 (XSS)

CVE-2007-1606