PT-2005-2787 · Zeroboard · Zeroboard

Published 2005-06-01 · Updated 2008-09-05 · CVE-2005-1820

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zeroboard versions 4.1pl2 through 4.1pl5

Description The issue allows remote attackers to execute arbitrary PHP code due to improper quoting when using the preg replace function.

Recommendations For Zeroboard versions 4.1pl2 through 4.1pl5, update to a version that properly quotes input to prevent code execution.

Exploit

Fix

Related Identifiers

CVE-2005-1820

Affected Products

Zeroboard

References · 5

• 🔥 http://securityfocus.com/bid/13823 · Exploit
• 🔥 https://exploit-db.com/exploits/1020 · Exploit
• 🔥 http://securiteam.com/exploits/5KP0V0AFPA.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1820 · Security Note
• http://pandora.sapzil.info/text/notify/20050123.zb41advisory.php · Note