CVE-2006-7154: Iono

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Iono allows remote attackers to obtain the full server path via certain requests to (1) templates/iono/admin/denied.tpl.php, (2) templates/iono/admin/index.tpl.php, and (a) other unspecified files in templates/.

Affected products

• Iono Iono: up to and including 2.3

Published 2007-03-07. Last modified 2026-06-16.