Back
CVE-2001-1199
Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter.
Published: Dec 17, 2001
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (32)
| Vendor | Product | Version |
|---|---|---|
| steve_kneizys | agora.cgi | 3.2 |
| steve_kneizys | agora.cgi | 3.2a |
| steve_kneizys | agora.cgi | 3.2b |
| steve_kneizys | agora.cgi | 3.2c |
| steve_kneizys | agora.cgi | 3.2d |
| steve_kneizys | agora.cgi | 3.2e |
| steve_kneizys | agora.cgi | 3.2f |
| steve_kneizys | agora.cgi | 3.2g |
| steve_kneizys | agora.cgi | 3.2h |
| steve_kneizys | agora.cgi | 3.2i |
| steve_kneizys | agora.cgi | 3.2j |
| steve_kneizys | agora.cgi | 3.2ja |
| steve_kneizys | agora.cgi | 3.2k |
| steve_kneizys | agora.cgi | 3.2l |
| steve_kneizys | agora.cgi | 3.2m |
| steve_kneizys | agora.cgi | 3.2n |
| steve_kneizys | agora.cgi | 3.2p |
| steve_kneizys | agora.cgi | 3.2q |
| steve_kneizys | agora.cgi | 3.2r |
| steve_kneizys | agora.cgi | 3.3a |
…and 12 more
GitHub Security Advisory GHSA-4w53-cpmg-rg5c
Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is...
References (10)
- http://www.agoracgi.com/security.html URL Repurposed
- http://www.iss.net/security_center/static/7708.php Vendor Advisory
- http://www.osvdb.org/698
- http://www.securityfocus.com/archive/1/246044 Vendor Advisory
- http://www.securityfocus.com/bid/3702 Exploit, Patch, Vendor Advisory
- http://www.agoracgi.com/security.html URL Repurposed
- http://www.iss.net/security_center/static/7708.php Vendor Advisory
- http://www.osvdb.org/698
- http://www.securityfocus.com/archive/1/246044 Vendor Advisory
- http://www.securityfocus.com/bid/3702 Exploit, Patch, Vendor Advisory
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
8.73%
Top 5% most likely to be exploited
Threat Score
32.6 / 100
Data Sources
NVD
EPSS
GitHub