CVE-2003-0770: Ikonboard.com Ikonboard

High severity, CVSS 7.5. EPSS: 11.1% chance of exploitation in the next 30 days.

FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement.

Affected products

• Ikonboard.com Ikonboard: version 3.1.1 only; version 3.1.2a only

Published 2003-09-22. Last modified 2026-06-16.