Ikonboard.Com Ikonboard vulnerabilities
6 known vulnerabilities affecting ikonboard.com/ikonboard.
Total CVEs
6
CISA KEV
0
Public exploits
4
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH4MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2003-0770P3HIGHCVSS 7.5PoCv3.1.1v3.1.2a2003-09-22
CVE-2003-0770 [HIGH] CVE-2003-0770: FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cooki
FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement.
nvd
CVE-2004-1406P3HIGHCVSS 7.5PoCv3.0.1v3.1.1+2 more2004-12-31
CVE-2004-1406 [HIGH] CVE-2004-1406: SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attacker
SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitrary SQL commands via the (1) st or (2) keywords parameter.
nvd
CVE-2001-0360P4MEDIUMCVSS 5.0PoC≤ 2.1.7b2001-06-27
CVE-2001-0360 [MEDIUM] CVE-2001-0360: Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attack
Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary files via a .. (dot dot) attack in the helpon parameter.
nvd
CVE-2002-0328P4HIGHCVSS 7.5PoCv2.17v3.0.12002-06-25
CVE-2002-0328 [HIGH] CVE-2002-0328: Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary s
Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as other Ikonboard users and steal cookies via Javascript in an IMG tag.
nvd
CVE-2001-0076P3CRITICALCVSS 10.0v2.1.7b2001-02-12
CVE-2001-0076 [CRITICAL] CVE-2001-0076: register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands v
register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL parameter, which overwrites an internal program variable that references a program to be executed.
nvd
CVE-2001-0841P4HIGHCVSS 7.5≤ ib2192001-12-06
CVE-2001-0841 [HIGH] CVE-2001-0841: Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attacke
Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.
nvd