Summary
The remote web server contains a CGI which is vulnerable to a cross-site scripting issue.
Description :
Agora is a CGI based e-commerce package. Due to poor input validation, Agora allows an attacker to execute cross-site scripting attacks.
Solution
Upgrade to Agora 4.0e or newer.
Severity
Classification
-
CVE CVE-2001-1199 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities