Vulnerability in Iono

CVE-2006-7154

Iono allows remote attackers to obtain the full server path via certain requests to (1) templates/iono/admin/denied.tpl.php, (2) templates/iono/admin/index.tpl.php, and (a) other unspecified files in templates/.

EPSS: 0.014 (70.5th percentile) — read the EPSS interpretation.

Affected products

  • Iono
  • N/a — versions n/a

References