Description
Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the _zb_path parameter to (1) _head.php or (2) outlogin.php, or the dir parameter to (3) write.php.
References
- 12257 vdb-entry
- 1012884 vdb-entry
- 20050113 STG Security Advisory: [SSA-20050113-25] ZeroBoard multiple vulnerabilities mailing-list
- zeroboard-file-disclosure(18891) vdb-entry