ZE
Vendor
Zeroboard
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2006-3070 | ZE Zeroboard Zeroboard | – | Jun 19 | write_ok.php in Zeroboard 4.1 pl8, when installed on Apache with mod_mime, allows remote attackers to bypass restrictions for uploading files with executable extensions by… |
| CVE-2006-1222 | ZE Zeroboard Zeroboard | – | Mar 14 | Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the (1) memo box title, (2) user… |
| CVE-2005-1820 | ZE Zeroboard Zeroboard | – | Jun 1 | zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the preg_replace function |
| CVE-2005-0379 | ZE Zeroboard Zeroboard | – | May 2 | Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a |
| CVE-2005-0380 | ZE Zeroboard Zeroboard | – | May 2 | Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) error.php in ZeroBoard 4.1pl5 and earlier… |
| CVE-2005-0495 | ZE Zeroboard Zeroboard | – | Feb 19 | Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page parameter to zboard.php… |
| CVE-2004-1419 | ZE Zeroboard Zeroboard | – | Dec 31 | PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) _zb_path parameter to… |
| CVE-2004-2738 | ZE Zeroboard Zeroboard | – | Dec 31 | Cross-site scripting (XSS) vulnerability in check_user_id.php in ZeroBoard 4.1pl4 and earlier allows remote attackers to inject arbitrary web script or HTML via the user_id… |
| CVE-2002-1704 | ZE Zeroboard Zeroboard | – | Dec 31 | Zeroboard 4.1, when the "allow_url_fopen" and "register_globals" variables are enabled, allows remote attackers to execute arbitrary PHP code by modifying the _zb_path parameter… |