CVE-2001-0076 register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL parameter, which overwrites an internal program variable that references a program....
HighCVSS 10.0
EPSS 5.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL parameter, which overwrites an internal program variable that references a program to be executed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ikonboard.com ikonboard | = 2.1.7b | No fix listed |
References
- 20001228 Remote vulnerability in Ikonboard upto version 2.1.7b mailing-list patch vendor-advisory
- 2157 patch vdb-entry vendor-advisory
- http-cgi-ikonboard(5819) vdb-entry