Vulnerability Database

314,452

Total vulnerabilities in the database

CVE-2003-0770

FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement.

  • Published: Sep 22, 2003
  • Updated: Nov 9, 2025
  • CVE: CVE-2003-0770
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
ikonboard.com / ikonboard 3.1.2a 3.1.2a.x
ikonboard.com / ikonboard 3.1.1 3.1.1.x