Speedr00T

**Name of the Vulnerable Software and Affected Versions** Zeroboard version 4.1 pl7 **Description** The issue allows remote attackers to execute arbitrary PHP code via a crafted parameter name, possibly related to now connect.php. **Recommendations** For Zeroboard version 4.1 pl7, consider restricting access to the lib.php file until a patch is available. As a temporary workaround, avoid using crafted parameter names in the affected API endpoint. At the moment, there is no information about a newer version that contains a fix for this vulnerability.