CVE-2017-6559

XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack.
References
Link Resource
http://www.securityfocus.com/bid/96940 Third Party Advisory VDB Entry
https://packetstormsecurity.com/files/141507/Agora-Project-3.2.2-Cross-Site-Scripting.html Exploit Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:agora-project:agora-project:3.2.2:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-03-09 09:59

Updated : 2024-02-04 19:11


NVD link : CVE-2017-6559

Mitre link : CVE-2017-6559

CVE.ORG link : CVE-2017-6559


JSON object : View

Products Affected

agora-project

  • agora-project
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')