3 matches found
CVE-2005-1820: Undefined Security Weakness
zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the pregreplace function...
CVE-2005-0495
Zeroboard/ZeroBoard web BBS contains a cross-site scripting (XSS) vulnerability (CVE-2005-0495). The issue arises from insufficient sanitization in multiple PHP entry points, allowing remote attackers to inject script via parameters to zboard.php (sn1, year, page) or view_image.php (filename). Op...
CVE-2005-0495: Undefined Security Weakness
Cross-site scripting XSS vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the 1 sn1, 2 year, or 3 page parameter to zboard.php or 4 filename to viewimage.php...