CVE-2002-2129

w-agora 4.1.5 - Cross-Site Scripting via Edit Form Field Name

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-2129. PoCs published by xatr0z.

AI-analyzed exploit summary The exploit describes a cross-site scripting (XSS) vulnerability in W-Agora forum software. The vulnerability allows arbitrary script code execution via a malicious link, potentially leading to cookie theft.

Description

Cross-site scripting vulnerability (XSS) in editform.php for w-Agora 4.1.5 allows remote attackers to execute arbitrary web script via an arbitrary form field name containing the script, which is echoed back to the user when displaying the form.

Exploits (1)

exploitdb WRITEUP VERIFIED
by xatr0z · textwebappsphp
https://www.exploit-db.com/exploits/22109

The exploit describes a cross-site scripting (XSS) vulnerability in W-Agora forum software. The vulnerability allows arbitrary script code execution via a malicious link, potentially leading to cookie theft.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: W-Agora (version not specified)
No auth needed
Prerequisites: Victim interaction (clicking a malicious link)
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2002-12/0225.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/10920
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2002-12/0222.html
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6464

Scores

EPSS 0.0361
EPSS Percentile 88.3%

Details

Status published
Products (1)
w-agora/w-agora 4.1.5
Published Dec 31, 2002
Tracked Since Feb 18, 2026