Vulnerability record · CVE-2001-1199 · published 17 December 2001
CVE-2001-1199: Steve kneizys agora.cgi vulnerability
SSteve Kneizys · Agora.Cgi
Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter.
Description
Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter.
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://www.agoracgi.com/security.html | URL Repurposed |
| http://www.iss.net/security_center/static/7708.php | Vendor Advisory |
| http://www.osvdb.org/698 | |
| http://www.securityfocus.com/archive/1/246044 | Vendor Advisory |
| http://www.securityfocus.com/bid/3702 | ExploitPatchVendor Advisory |
| http://www.agoracgi.com/security.html | URL Repurposed |
| http://www.iss.net/security_center/static/7708.php | Vendor Advisory |
| http://www.osvdb.org/698 | |
| http://www.securityfocus.com/archive/1/246044 | Vendor Advisory |
| http://www.securityfocus.com/bid/3702 | ExploitPatchVendor Advisory |
Track CVE-2001-1199 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2001-1199), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
