VULNERABILITY INTELLIGENCE

CVE-2002-2128

CVSS score4.6 MEDIUM

EPSS probability0.38%

CISA KEVNot currently listed

Published2002-12-31

Last modified2026-06-16

Description

editform.php in w-Agora 4.1.5 allows local users to execute arbitrary PHP code via .. (dot dot) sequences in the file parameter.