MidnightBSD

Advisories for agora-project

CVE-2017-6559 MEDIUM

XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-79,

Products Affected

Vendor Product Version
agora-project agora-project 3.2.2
CVE-2017-6560 MEDIUM

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-79,

Products Affected

Vendor Product Version
agora-project agora-project 3.2.2
CVE-2017-6561 MEDIUM

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=[XSS] attack.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-79,

Products Affected

Vendor Product Version
agora-project agora-project 3.2.2
CVE-2017-6562 MEDIUM

XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS] attack.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-79,

Products Affected

Vendor Product Version
agora-project agora-project 3.2.2