CVE-2001-0360

Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary files via a .. dot dot attack in the helpon parameter...

CVE-2001-0360

The CVE-2001-0360 entry describes a directory traversal flaw in Ikonboard 2.1.7b and earlier, where help.cgi process accepts a malformed helpon parameter containing .. to read arbitrary files. The affected software is Ikonboard; the vulnerable component is help.cgi; root cause is improper validat...