CVE-2010-4867

Name of the Vulnerable Software and Affected Versions W-Agora versions 4.2.1 and earlier

Description A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files. This is achieved by providing a .. (dot dot) in the bn parameter of the search.php3 (also known as search.php) file.

Recommendations For versions 4.2.1 and earlier, consider restricting access to the search.php3 file until a patch is available. As a temporary workaround, avoid using the bn parameter in the search.php3 file to minimize the risk of exploitation.