CyberSec.Space Logo
Back to CVE Browser

CVE-2002-0328

HIGH
7.5
CVSS Severity Score
EPSS Score0.1860%
EPSS Percentile24.99th
PublishedJun 25, 2002
Last ModifiedApr 16, 2026

Vulnerability Description

Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as other Ikonboard users and steal cookies via Javascript in an IMG tag.

Affected Platforms (CPE)

📦
Ikonboard.com

Ikonboard

= 2.17
📦
Ikonboard.com

Ikonboard

= 3.0.1

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=101475420818274&w=2
🔗 http://www.securityfocus.com/bid/4182
🔗 http://marc.info/?l=bugtraq&m=101475420818274&w=2
🔗 http://www.securityfocus.com/bid/4182

Related Vulnerabilities

CVE-2001-007610.0

register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL parameter, wh...

CVE-2003-07707.5

FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal cha...

CVE-2004-14067.5

SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitrary SQL comm...

CVE-2001-08417.5

Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain...