Beveiligingsadvies

CVE-2004-1419

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2005-02-12 05:00:00
Laatst bijgewerkt 2024-08-08 00:53:23
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) _zb_path parameter to outlogin.php or (2) dir parameter to write.php to reference a URL on a remote web server that contains the code.