Vulnerabilities > CVE-2001-0360 - Remote File Disclosure vulnerability in Ikonboard

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
ikonboard-com
exploit available

Summary

Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary files via a .. (dot dot) attack in the helpon parameter.

Vulnerable Configurations

Part Description Count
Application
Ikonboard.Com
1

Exploit-Db

descriptionIkonboard 2.1.7 b Remote File Disclosure Vulnerability. CVE-2001-0360. Remote exploit for cgi platform
idEDB-ID:20683
last seen2016-02-02
modified2001-03-11
published2001-03-11
reporterMartin J. Muench
sourcehttps://www.exploit-db.com/download/20683/
titleIkonboard 2.1.7 b Remote File Disclosure Vulnerability