| Package | Affected versions | Patched versions |
|---|---|---|
| w-agora | = 4.1.6a |
list.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP request, possibly involving a malformed id parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free