Back to CVE Browser

CVE-2001-0076

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1790%

EPSS Percentile11.28th

PublishedFeb 12, 2001

Last ModifiedApr 16, 2026

Vulnerability Description

register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL parameter, which overwrites an internal program variable that references a program to be executed.

Affected Platforms (CPE)

📦

Ikonboard.com

Ikonboard

= 2.1.7b

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2000-12/0483.html

🔗 http://www.securityfocus.com/bid/2157

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5819

🔗 http://archives.neohapsis.com/archives/bugtraq/2000-12/0483.html

🔗 http://www.securityfocus.com/bid/2157

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/5819

Related Vulnerabilities

CVE-2003-07707.5

FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal cha...

CVE-2004-14067.5

SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitrary SQL comm...

CVE-2002-03287.5

Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as other Ikonboard users...

CVE-2001-08417.5

Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain...