CVE-2002-2128: W-Agora

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

editform.php in w-Agora 4.1.5 allows local users to execute arbitrary PHP code via .. (dot dot) sequences in the file parameter.

Affected products

• W-Agora W-Agora: version 4.1.5 only

Published 2002-12-31. Last modified 2026-06-16.