Description
register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL parameter, which overwrites an internal program variable that references a program to be executed.
References
- 2157 vdb-entry
- 20001228 Remote vulnerability in Ikonboard upto version 2.1.7b mailing-list
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5819 vdb-entry