Описание
FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement.
Ссылки
- ExploitPatchVendor Advisory
- ExploitPatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:ikonboard.com:ikonboard:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ikonboard.com:ikonboard:3.1.2a:*:*:*:*:*:*:*
EPSS
Процентиль: 93%
0.1091
Средний
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 3 лет назад
FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement.
EPSS
Процентиль: 93%
0.1091
Средний
7.5 High
CVSS2
Дефекты
NVD-CWE-Other