Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2003-0770

FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement.

  • Published: Sep 22, 2003
  • Updated: Apr 13, 2023
  • CVE: CVE-2003-0770
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
ikonboard.com / ikonboard 3.1.2a 3.1.2a.x
ikonboard.com / ikonboard 3.1.1 3.1.1.x