← Database

CVE-2003-0770

HIGH CVSS: 7.5 Published: 2003-09-22 Modified: 2026-06-16

Description

FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement.

Affected Platforms

Ikonboard.Com Ikonboard

Weakness Type

NVD-CWE-Other

References