Login Request a demo
ZE
Product
Zeroboard
by Zeroboard · last CVE Jun 19, 2006
9
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities9Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Zeroboard to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2006-3070
–
2%
Jun 19
write_ok.php in Zeroboard 4.1 pl8, when installed on Apache with mod_mime, allows remote attackers to bypass restrictions for uploading files with executable extensions by…
Affected: 4.1_pl8
CVE-2006-1222
–
2%
Mar 14
Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the (1) memo box title, (2) user…
Affected: 4.1_pl2; 4.1_pl3; 4.1_pl4; 4.1_pl5; 4.1_pl6; 4.1_pl7
CVE-2005-1820
–
3%
Jun 1
zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the preg_replace function
Affected: 4.1_pl2; 4.1_pl3; 4.1_pl4; 4.1_pl5
CVE-2005-0379
–
2%
May 2
Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a
Affected: 4.1_pl2; 4.1_pl3; 4.1_pl4; 4.1_pl5
CVE-2005-0380
–
4%
May 2
Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) error.php in ZeroBoard 4.1pl5 and earlier…
Affected: 4.1_pl2; 4.1_pl3; 4.1_pl4; 4.1_pl5
CVE-2005-0495
–
1%
Feb 19
Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page parameter to zboard.php…
Affected: 4.1_pl2; 4.1_pl3; 4.1_pl4; 4.1_pl5; 4.1_pl6
CVE-2004-1419
–
2%
Dec 31
PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) _zb_path parameter to…
Affected: 4.1_pl2; 4.1_pl3; 4.1_pl4
CVE-2004-2738
–
2%
Dec 31
Cross-site scripting (XSS) vulnerability in check_user_id.php in ZeroBoard 4.1pl4 and earlier allows remote attackers to inject arbitrary web script or HTML via the user_id…
Affected: 4.1_pl2; 4.1_pl3; 4.1_pl4
CVE-2002-1704
–
2%
Dec 31
Zeroboard 4.1, when the "allow_url_fopen" and "register_globals" variables are enabled, allows remote attackers to execute arbitrary PHP code by modifying the _zb_path parameter…
Affected: 4.1_pl2
Showing 9