Zeroboard : Security Vulnerabilities, CVEs, Published In 2004 (File inclusion)
PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) _zb_path parameter to outlogin.php or (2) dir parameter to write.php to reference a URL on a remote web server that contains the code.
Max CVSS
6.8
EPSS Score
2.94%
Published
2004-12-31
Updated
2017-07-11
1 vulnerabilities found