CVE-2004-1419
- State
- Published
- Severity
- Not scored
- Published
- Feb 12, 2005
- Updated
- Aug 8, 2024
- Reserved
- Feb 12, 2005
Description
PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) _zb_path parameter to outlogin.php or (2) dir parameter to write.php to reference a URL on a remote web server that contains the code.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 12580vdb-entry
- zeroboard-outlogin-file-include(18677)vdb-entry
- 20041224 STG Security Advisory: [SSA-20041220-16] PHP source injection and cross-site scripting vulnerabilities in ZeroBoardmailing-list
- 20041223 STG Security Advisory: [SSA-20041220-16] PHP source injection and cross-site scripting vulnerabilities in ZeroBoardmailing-list
- 13649third-party-advisory
- 12581vdb-entry
- 12103vdb-entry
- zeroboard-write-file-include(18679)vdb-entry
- 1012677vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.