110 matches found
Zeroboard < 4.1pl6 Multiple XSS
The remote host runs Zeroboard, a web BBS application popular in Korea. The remote version of this software is vulnerable to cross-site scripting attacks due to a lack of sanitization of user-supplied data. Successful exploitation of this issue may allow an attacker to execute malicious script co...
CVE-2005-0495
Zeroboard/ZeroBoard web BBS contains a cross-site scripting (XSS) vulnerability (CVE-2005-0495). The issue arises from insufficient sanitization in multiple PHP entry points, allowing remote attackers to inject script via parameters to zboard.php (sn1, year, page) or view_image.php (filename). Op...
CVE-2005-0495
Cross-site scripting XSS vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the 1 sn1, 2 year, or 3 page parameter to zboard.php or 4 filename to viewimage.php...
CVE-2005-0495: Undefined Security Weakness
Cross-site scripting XSS vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the 1 sn1, 2 year, or 3 page parameter to zboard.php or 4 filename to viewimage.php...
ZeroBoard Multiple Vulnerabilities
Binary data 2636.prm...
Multiples vulnerability in ZeroBoard,
".,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,..,- '^'-,.." ".,-- ,. -.,--,." ".,--,. ALBANIA SECURITY CLAN -.,--,." ".,-- ,. -.,--,." ".,-- ,. ...::www.albanianhaxorz.org::... -.,--,." ".,--,.- -.,--,." ".,--,.- PROUD TO BE ALBANIAN -.,--,." ".,-- ,. -.,--,." ".,--,. Long Live Ethnic Albania...
CVE-2005-0495
Cross-site scripting XSS vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the 1 sn1, 2 year, or 3 page parameter to zboard.php or 4 filename to viewimage.php...
ZeroBoard 4.1 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/12596/info ZeroBoard is reported prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate theft of cookie-based...
ZeroBoard 4.1 - Multiple Cross-Site Scripting Vulnerabilities
ZeroBoard 4.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12596/info ZeroBoard is reported prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...
CVE-2005-0380
CVE-2005-0380 affects Zeroboard <= 4.1pl5, where multiple PHP scripts (print_category.php, login.php, setup.php, ask_password.php, error.php) allow remote file inclusion via the dir parameter, enabling remote PHP code execution and potential file disclosure. OpenVAS notes Zeroboard
CVE-2005-0379
ZeroBoard prior to or including version 4.1pl5 is affected by multiple directory-traversal vulnerabilities. An attacker can read arbitrary files by supplying a .. (dot dot) in _zb_path to _head.php or outlogin.php, or in the dir parameter to write.php. This is a remote, unauthenticated exposure l...
CVE-2005-0380
Multiple PHP remote file inclusion vulnerabilities in 1 printcategory.php, 2 login.php, 3 setup.php, 4 askpassword.php, or 5 error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that...
CVE-2005-0379
Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the zbpath parameter to 1 head.php or 2 outlogin.php, or the dir parameter to 3 write.php...
CVE-2005-0379: Undefined Security Weakness
Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the zbpath parameter to 1 head.php or 2 outlogin.php, or the dir parameter to 3 write.php...
CVE-2005-0380: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in 1 printcategory.php, 2 login.php, 3 setup.php, 4 askpassword.php, or 5 error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that...
CVE-2004-1419
PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PHP code by modifying the 1 zbpath parameter to outlogin.php or 2 dir parameter to write.php to reference a URL on a remote web server that contains the code...
CVE-2004-1419
CVE-2004-1419 affects Zeroboard 4.1pl4 and earlier. The vulnerability arises from PHP remote file inclusion by manipulating parameters: _zb_path in outlogin.php or dir in write.php to reference a URL on a remote server, enabling arbitrary PHP code execution. OpenVAS notes additional remote code e...
CVE-2004-1419: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PHP code by modifying the 1 zbpath parameter to outlogin.php or 2 dir parameter to write.php to reference a URL on a remote web server that contains the code...
ZeroBoard Multiple Scripts dir Parameter Remote File Inclusion
The remote host runs Zeroboard, a web BBS application popular in Korea. The remote version of this CGI is vulnerable to multiple flaws which may allow an attacker to execute arbitrary PHP commands on the remote host by including a PHP file hosted on a third-party server, or to read arbitrary file...
STG Security Advisory 2005-01-13.25
STG Security Advisory: SSA-20050113-25 ZeroBoard multiple vulnerabilities Revision 1.1 Date Published: 2004-12-31 KST Last Update: 2005-1-13 Disclosed by SSR Team [email protected] Summary ======= ZeroBoard is one of widely used web BBS applications in Korea. However, an input validation...