Total vulnerabilities in the database
w-agora 4.2.1 allows remote attackers to obtain sensitive information by via the (1) bn[] array parameter to index.php, which expects a string, and (2) certain parameters to delete_forum.php, which displays the path name in the resulting error message.
| Software | From | Fixed in |
|---|---|---|
| w-agora / w-agora | 4.2.1 | 4.2.1.x |