Lucene search

CVE-2003-0770

🗓️ 22 Sep 2003 04:00:00Reported by mitreType

FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 3
cvelist	CVE-2003-0770	12 Sep 200304:00	–	cvelist
nessus	Ikonboard FUNC.pm lang Cookie Arbitrary Command Execution	8 May 200300:00	–	nessus
nvd	CVE-2003-0770	22 Sep 200304:00	–	nvd

Nvd

Node

ikonboard.com ikonboardMatch3.1.1

ikonboard.com ikonboardMatch3.1.2a

Source	Link
securityfocus	www.securityfocus.com/archive/1/336598
securityfocus	www.securityfocus.com/archive/1/317234
marc	www.marc.info/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Sep 2003 04:00Current

7.7High risk

Vulners AI Score7.7

CVSS27.5

EPSS0.07292