← Database

CVE-2001-1199

HIGH CVSS: 7.5 Published: 2001-12-17 Modified: 2026-06-16

Description

Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter.

Affected Platforms

Steve Kneizys Agora.Cgi

Weakness Type

NVD-CWE-Other

References