CVE-2002-1704

Zeroboard 4.1 is affected when allow_url_fopen and register_globals are enabled. The vulnerability allows remote code execution by altering the _zb_path parameter to reference a URL on a remote server containing the attacker’s PHP code. The provided sources describe the affected product and the i...

CVE-2002-1704

Zeroboard 4.1, when the "allowurlfopen" and "registerglobals" variables are enabled, allows remote attackers to execute arbitrary PHP code by modifying the zbpath parameter to reference a URL on a remote web server that contains the code...