CVE-2003-0770

None

CVSS

—

EPSS

11.1%

Published

Sep 22, 2003

CISA due date

—

The record

FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement.

Affected packages

Ecosystem	Package	Introduced	Fixed