CVE-2005-0495

Zeroboard/ZeroBoard web BBS contains a cross-site scripting (XSS) vulnerability (CVE-2005-0495). The issue arises from insufficient sanitization in multiple PHP entry points, allowing remote attackers to inject script via parameters to zboard.php (sn1, year, page) or view_image.php (filename). Op...