Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Agora.cgi | Steve_kneizys | 3.2 (including) | 3.2 (including) |
| Agora.cgi | Steve_kneizys | 3.2a (including) | 3.2a (including) |
| Agora.cgi | Steve_kneizys | 3.2b (including) | 3.2b (including) |
| Agora.cgi | Steve_kneizys | 3.2c (including) | 3.2c (including) |
| Agora.cgi | Steve_kneizys | 3.2d (including) | 3.2d (including) |
| Agora.cgi | Steve_kneizys | 3.2e (including) | 3.2e (including) |
| Agora.cgi | Steve_kneizys | 3.2f (including) | 3.2f (including) |
| Agora.cgi | Steve_kneizys | 3.2g (including) | 3.2g (including) |
| Agora.cgi | Steve_kneizys | 3.2h (including) | 3.2h (including) |
| Agora.cgi | Steve_kneizys | 3.2i (including) | 3.2i (including) |
| Agora.cgi | Steve_kneizys | 3.2j (including) | 3.2j (including) |
| Agora.cgi | Steve_kneizys | 3.2ja (including) | 3.2ja (including) |
| Agora.cgi | Steve_kneizys | 3.2k (including) | 3.2k (including) |
| Agora.cgi | Steve_kneizys | 3.2l (including) | 3.2l (including) |
| Agora.cgi | Steve_kneizys | 3.2m (including) | 3.2m (including) |
| Agora.cgi | Steve_kneizys | 3.2n (including) | 3.2n (including) |
| Agora.cgi | Steve_kneizys | 3.2p (including) | 3.2p (including) |
| Agora.cgi | Steve_kneizys | 3.2q (including) | 3.2q (including) |
| Agora.cgi | Steve_kneizys | 3.2r (including) | 3.2r (including) |
| Agora.cgi | Steve_kneizys | 3.3a (including) | 3.3a (including) |
| Agora.cgi | Steve_kneizys | 3.3b (including) | 3.3b (including) |
| Agora.cgi | Steve_kneizys | 3.3c (including) | 3.3c (including) |
| Agora.cgi | Steve_kneizys | 3.3d (including) | 3.3d (including) |
| Agora.cgi | Steve_kneizys | 3.3e (including) | 3.3e (including) |
| Agora.cgi | Steve_kneizys | 3.3f (including) | 3.3f (including) |
| Agora.cgi | Steve_kneizys | 3.3i (including) | 3.3i (including) |
| Agora.cgi | Steve_kneizys | 3.3j (including) | 3.3j (including) |
| Agora.cgi | Steve_kneizys | 4.0 (including) | 4.0 (including) |
| Agora.cgi | Steve_kneizys | 4.0a (including) | 4.0a (including) |
| Agora.cgi | Steve_kneizys | 4.0b (including) | 4.0b (including) |
| Agora.cgi | Steve_kneizys | 4.0c (including) | 4.0c (including) |
| Agora.cgi | Steve_kneizys | 4.0d (including) | 4.0d (including) |