CVE-2002-0215: Steve Kneizys Agora.cgi

Medium severity, CVSS 5.0. EPSS: 7.5% chance of exploitation in the next 30 days.

Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message.

Affected products

• Steve Kneizys Agora.cgi: version 3.2 only; version 3.2a only; version 3.2b only; version 3.2c only; version 3.2d only; version 3.2e only; …

Published 2002-05-16. Last modified 2026-06-16.