Vulnerabilities > CVE-2007-0606 - Information Disclosure vulnerability in W-Agora 4.2.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
w-agora 4.2.1 allows remote attackers to obtain sensitive information by via the (1) bn[] array parameter to index.php, which expects a string, and (2) certain parameters to delete_forum.php, which displays the path name in the resulting error message.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |