Agora.cgi 3.2r through 4.0 while in debug mode allows remote...

5 CVSS

Vulnerability Description

Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-0215

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from steve kneizys

View All →

CVE-2001-1199

Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g,...

High 7.5

Affected Vendor

steve kneizys

View all reports →

Affected Software

agora.cgi

Vulnerable Versions:

3.2, 3.2a, 3.2b, 3.2c, 3.2d, 3.2e, 3.2f, 3.2g, 3.2h, 3.2i, 3.2j, 3.2ja, 3.2k, 3.2l, 3.2m, 3.2n, 3.2p, 3.2q, 3.2r, 3.3a, 3.3b, 3.3c, 3.3d, 3.3e, 3.3f, 3.3i, 3.3j, 4.0, 4.0a, 4.0b, 4.0c, 4.0d, 4.0e

Timeline

Official Publish: May 3rd, 2002

Last Modified: August 8th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.