FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement.
References
Link | Resource |
---|---|
http://www.securityfocus.com/archive/1/317234 | Exploit Patch Vendor Advisory |
http://www.securityfocus.com/archive/1/336598 | |
http://marc.info/?l=bugtraq&m=106381136115972&w=2 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2003-09-21 21:00
Updated : 2016-10-17 19:37
NVD link : CVE-2003-0770
Mitre link : CVE-2003-0770
JSON object : View
CWE
Products Affected
ikonboard.com
- ikonboard