Description
PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) _zb_path parameter to outlogin.php or (2) dir parameter to write.php to reference a URL on a remote web server that contains the code.
References
- 12580 vdb-entry
- zeroboard-outlogin-file-include(18677) vdb-entry
- 20041224 STG Security Advisory: [SSA-20041220-16] PHP source injection and cross-site scripting vulnerabilities in ZeroBoard mailing-list
- 20041223 STG Security Advisory: [SSA-20041220-16] PHP source injection and cross-site scripting vulnerabilities in ZeroBoard mailing-list
- 13649 third-party-advisory
- 12581 vdb-entry
- 12103 vdb-entry
- zeroboard-write-file-include(18679) vdb-entry
- 1012677 vdb-entry