Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2952▲ 10 respecto a la semana anterior

Críticas / altas1451▲ 185 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)272▼ 254 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2004-1406	Modificada	Alta (7.5)	2.4%	—	Ikonboard.com Ikonboard	31/12/2004	16/6/2026	SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitrary SQL commands via the (1) st or (2) keywords parameter.
CVE-2003-0770	Modificada	Alta (7.5)	11%	—	Ikonboard.com Ikonboard	22/9/2003	16/6/2026	FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute arbitrary code when the cookie is inserted into a Perl "eval" statement.
CVE-2002-2231	Modificada	Media (4.3)	1.1%	—	Ikonboard	31/12/2002	16/6/2026	Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) a javascript: URL in a photo URL or (2) an X-Forwarded-For: header.
CVE-2002-2230	Modificada	Media (4.3)	0.84%	—	Ikonboard	31/12/2002	16/6/2026	Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via a private message with a javascript: URL in the IMG tag, in which the URL ends in a ".gif" or ".jpg" string, a variant of CVE-2002-0328.
CVE-2002-0328	Modificada	Alta (7.5)	5.4%	—	Ikonboard.com Ikonboard	25/6/2002	16/6/2026	Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as other Ikonboard users and steal cookies via Javascript in an IMG tag.
CVE-2001-0841	Modificada	Alta (7.5)	2.7%	—	Ikonboard.com Ikonboard	6/12/2001	16/6/2026	Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.
CVE-2001-0360	Modificada	Media (5)	8.3%	—	Ikonboard.com Ikonboard	27/6/2001	16/6/2026	Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary files via a .. (dot dot) attack in the helpon parameter.
CVE-2001-0076	Modificada	Alta (10)	5.2%	—	Ikonboard.com Ikonboard	12/2/2001	16/6/2026	register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL parameter, which overwrites an internal program variable that references a program to be executed.