CVE-2004-1563

w-agora 4.1.6a - Cross-Site Scripting via Thread, Loginuser, or Userid Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 3 public exploits for CVE-2004-1563. PoCs published by Alexander Antipov.

AI-analyzed exploit summary The provided text describes multiple vulnerabilities in W-Agora 4.1.6a, including SQL injection, XSS, and HTTP response splitting due to insufficient input sanitization. It includes a sample HTTP POST request demonstrating an XSS attack vector.

Description

Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web script or HTML via the (1) thread parameter to download_thread.php, (2) loginuser parameter to login.php, or (3) userid parameter to forgot_password.php.

Exploits (3)

exploitdb WRITEUP VERIFIED
by Alexander Antipov · textwebappsphp
https://www.exploit-db.com/exploits/24652

The provided text describes multiple vulnerabilities in W-Agora 4.1.6a, including SQL injection, XSS, and HTTP response splitting due to insufficient input sanitization. It includes a sample HTTP POST request demonstrating an XSS attack vector.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: W-Agora 4.1.6a
No auth needed
Prerequisites: Access to the login.php endpoint
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by Alexander Antipov · textwebappsphp
https://www.exploit-db.com/exploits/24649

The provided text describes multiple vulnerabilities in W-Agora 4.1.6a, including SQL injection, XSS, and HTTP response splitting, with an example HTTP POST request demonstrating XSS via the 'userid' parameter. No actual exploit code is present, only a description and a template for exploitation.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: W-Agora 4.1.6a
No auth needed
Prerequisites: Access to the target application's forgot_password.php endpoint
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by Alexander Antipov · textwebappsphp
https://www.exploit-db.com/exploits/24650

The provided text describes multiple vulnerabilities in W-Agora 4.1.6a, including SQL injection, XSS, and HTTP response splitting due to insufficient input sanitization. It includes an example URL for XSS exploitation but lacks actual exploit code.

Classification
Writeup 80%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: W-Agora 4.1.6a
No auth needed
Prerequisites: Access to the vulnerable application
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17553
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1011463
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/12695
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/11283
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=109655691512298&w=2
Exploit, Vendor Advisory mailing-list x_refsource_fulldisc
http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html

Scores

EPSS 0.0201
EPSS Percentile 78.3%

Details

Status published
Products (1)
w-agora/w-agora 4.1.6a
Published Dec 31, 2004
Tracked Since Feb 18, 2026