EDB-34906

functional

W-Agora 4.2.1 - 'search.php?bn' Cross-Site Scripting

view exploit source exploit_dbverifiedtype webappsauthor MustLivepublished 2010-10-22catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2010-4868USmedium4.3Exploit
Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn para…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan