Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Agora.cgi | Steve_kneizys | 3.2 (including) | 3.2 (including) |
| Agora.cgi | Steve_kneizys | 3.2a (including) | 3.2a (including) |
| Agora.cgi | Steve_kneizys | 3.2b (including) | 3.2b (including) |
| Agora.cgi | Steve_kneizys | 3.2c (including) | 3.2c (including) |
| Agora.cgi | Steve_kneizys | 3.2d (including) | 3.2d (including) |
| Agora.cgi | Steve_kneizys | 3.2e (including) | 3.2e (including) |
| Agora.cgi | Steve_kneizys | 3.2f (including) | 3.2f (including) |
| Agora.cgi | Steve_kneizys | 3.2g (including) | 3.2g (including) |
| Agora.cgi | Steve_kneizys | 3.2h (including) | 3.2h (including) |
| Agora.cgi | Steve_kneizys | 3.2i (including) | 3.2i (including) |
| Agora.cgi | Steve_kneizys | 3.2j (including) | 3.2j (including) |
| Agora.cgi | Steve_kneizys | 3.2ja (including) | 3.2ja (including) |
| Agora.cgi | Steve_kneizys | 3.2k (including) | 3.2k (including) |
| Agora.cgi | Steve_kneizys | 3.2l (including) | 3.2l (including) |
| Agora.cgi | Steve_kneizys | 3.2m (including) | 3.2m (including) |
| Agora.cgi | Steve_kneizys | 3.2n (including) | 3.2n (including) |
| Agora.cgi | Steve_kneizys | 3.2p (including) | 3.2p (including) |
| Agora.cgi | Steve_kneizys | 3.2q (including) | 3.2q (including) |
| Agora.cgi | Steve_kneizys | 3.2r (including) | 3.2r (including) |
| Agora.cgi | Steve_kneizys | 3.3a (including) | 3.3a (including) |
| Agora.cgi | Steve_kneizys | 3.3b (including) | 3.3b (including) |
| Agora.cgi | Steve_kneizys | 3.3c (including) | 3.3c (including) |
| Agora.cgi | Steve_kneizys | 3.3d (including) | 3.3d (including) |
| Agora.cgi | Steve_kneizys | 3.3e (including) | 3.3e (including) |
| Agora.cgi | Steve_kneizys | 3.3f (including) | 3.3f (including) |
| Agora.cgi | Steve_kneizys | 3.3i (including) | 3.3i (including) |
| Agora.cgi | Steve_kneizys | 3.3j (including) | 3.3j (including) |
| Agora.cgi | Steve_kneizys | 4.0 (including) | 4.0 (including) |
| Agora.cgi | Steve_kneizys | 4.0a (including) | 4.0a (including) |
| Agora.cgi | Steve_kneizys | 4.0b (including) | 4.0b (including) |
| Agora.cgi | Steve_kneizys | 4.0c (including) | 4.0c (including) |
| Agora.cgi | Steve_kneizys | 4.0d (including) | 4.0d (including) |
| Agora.cgi | Steve_kneizys | 4.0e (including) | 4.0e (including) |