112 matches found
CVE-2005-0380
Multiple PHP remote file inclusion vulnerabilities in 1 printcategory.php, 2 login.php, 3 setup.php, 4 askpassword.php, or 5 error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that...
zeroboardXSS.txt
".,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,..,- '^'-,.." ".,-- ,. -.,--,." ".,--,. ALBANIA SECURITY CLAN -.,--,." ".,-- ,. -.,--,." ".,-- ,. ...::www.albanianhaxorz.org::... -.,--,." ".,--,.- -.,--,." ".,--,.- PROUD TO BE ALBANIAN -.,--,." ".,-- ,. -.,--,." ".,--,. Long Live Ethnic Albania...
Zeroboard < 4.1pl6 Multiple XSS
The remote host runs Zeroboard, a web BBS application popular in Korea. The remote version of this software is vulnerable to cross-site scripting attacks due to a lack of sanitization of user-supplied data. Successful exploitation of this issue may allow an attacker to execute malicious script co...
CVE-2005-0495
Cross-site scripting XSS vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the 1 sn1, 2 year, or 3 page parameter to zboard.php or 4 filename to viewimage.php...
CVE-2005-0495
Zeroboard/ZeroBoard web BBS contains a cross-site scripting (XSS) vulnerability (CVE-2005-0495). The issue arises from insufficient sanitization in multiple PHP entry points, allowing remote attackers to inject script via parameters to zboard.php (sn1, year, page) or view_image.php (filename). Op...
CVE-2005-0495: Undefined Security Weakness
Cross-site scripting XSS vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the 1 sn1, 2 year, or 3 page parameter to zboard.php or 4 filename to viewimage.php...
ZeroBoard Multiple Vulnerabilities
Binary data 2636.prm...
Multiples vulnerability in ZeroBoard,
".,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,..,- '^'-,.." ".,-- ,. -.,--,." ".,--,. ALBANIA SECURITY CLAN -.,--,." ".,-- ,. -.,--,." ".,-- ,. ...::www.albanianhaxorz.org::... -.,--,." ".,--,.- -.,--,." ".,--,.- PROUD TO BE ALBANIAN -.,--,." ".,-- ,. -.,--,." ".,--,. Long Live Ethnic Albania...
CVE-2005-0495
Cross-site scripting XSS vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the 1 sn1, 2 year, or 3 page parameter to zboard.php or 4 filename to viewimage.php...
ZeroBoard 4.1 - Multiple Cross-Site Scripting Vulnerabilities
ZeroBoard 4.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12596/info ZeroBoard is reported prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...
ZeroBoard 4.1 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/12596/info ZeroBoard is reported prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate theft of cookie-based...
CVE-2005-0379
Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the zbpath parameter to 1 head.php or 2 outlogin.php, or the dir parameter to 3 write.php...
CVE-2005-0380
Multiple PHP remote file inclusion vulnerabilities in 1 printcategory.php, 2 login.php, 3 setup.php, 4 askpassword.php, or 5 error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that...
CVE-2005-0379
ZeroBoard prior to or including version 4.1pl5 is affected by multiple directory-traversal vulnerabilities. An attacker can read arbitrary files by supplying a .. (dot dot) in _zb_path to _head.php or outlogin.php, or in the dir parameter to write.php. This is a remote, unauthenticated exposure l...
CVE-2005-0380
CVE-2005-0380 affects Zeroboard <= 4.1pl5, where multiple PHP scripts (print_category.php, login.php, setup.php, ask_password.php, error.php) allow remote file inclusion via the dir parameter, enabling remote PHP code execution and potential file disclosure. OpenVAS notes Zeroboard
CVE-2005-0379: Undefined Security Weakness
Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the zbpath parameter to 1 head.php or 2 outlogin.php, or the dir parameter to 3 write.php...
CVE-2005-0380: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in 1 printcategory.php, 2 login.php, 3 setup.php, 4 askpassword.php, or 5 error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that...
CVE-2004-1419
CVE-2004-1419 affects Zeroboard 4.1pl4 and earlier. The vulnerability arises from PHP remote file inclusion by manipulating parameters: _zb_path in outlogin.php or dir in write.php to reference a URL on a remote server, enabling arbitrary PHP code execution. OpenVAS notes additional remote code e...
CVE-2004-1419
PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PHP code by modifying the 1 zbpath parameter to outlogin.php or 2 dir parameter to write.php to reference a URL on a remote web server that contains the code...
CVE-2004-1419: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PHP code by modifying the 1 zbpath parameter to outlogin.php or 2 dir parameter to write.php to reference a URL on a remote web server that contains the code...