CVE-2001-0841: Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to over
CVE-2001-0841 is a high-severity flaw (CVSS 7.5) affecting ikonboard. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| EPSS exploit chance | 2.7% (top 14%) |
| CISA exploited list | No |
| Published | 2001-12-06 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2001-0841?
ikonboard: upgrade to newer than ib219. Exact commands for each OS are on this page.
Is CVE-2001-0841 being exploited?
CVE-2001-0841 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2001-0841 affect?
CVE-2001-0841 affects ikonboard. Severity is high (CVSS 7.5). Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.
How urgent is CVE-2001-0841?
Priority 48/100. High severity
Related CVEs
- CVE-2004-1406 HIGH 7.5 DOWNGRADE SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to injec
- CVE-2003-0770 HIGH 7.5 DOWNGRADE FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it
- CVE-2002-2231 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web sc
- CVE-2002-2230 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web sc
- CVE-2002-0328 HIGH 7.5 DOWNGRADE Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as o