Description
Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that contains the code.
References
- 12206 vdb-entry
- 1012884 vdb-entry
- 13769 third-party-advisory
- 12930 vdb-entry
- 12932 vdb-entry
- 12929 vdb-entry
- 20050113 STG Security Advisory: [SSA-20050113-25] ZeroBoard multiple vulnerabilities mailing-list
- zeroboard-printcategory-file-include(18892) vdb-entry
- 12931 vdb-entry
- 12258 vdb-entry
- 12928 vdb-entry
- zeroboard-zero-vote-file-include(18893) vdb-entry