Vulnerabilities > CVE-2002-2128 - Unspecified vulnerability in W-Agora 4.1.5
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
editform.php in w-Agora 4.1.5 allows local users to execute arbitrary PHP code via .. (dot dot) sequences in the file parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |