zeroboard records
11 published records for vendor zeroboard.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 5
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2005-0380No exploit | Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) errzeroboard · zeroboard | High7.5 | — | 4.4% | May 2, 2005 |
31Monitor | CVE-2005-1820Proof of concept | zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the pzeroboard · zeroboard | High7.5 | — | 2.7% | Jun 1, 2005 |
30Monitor | CVE-2012-4743No exploit | Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary Szeroboard · zeroboard · CWE-89 | High7.5 | — | 1.3% | Aug 31, 2012 |
28Monitor | CVE-2004-1419No exploit | PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PHP code by modifying tzeroboard · zeroboard · CWE-94 | Medium6.8 | — | 2.4% | Dec 31, 2004 |
21Monitor | CVE-2002-1704Proof of concept | Zeroboard 4.1, when the "allow_url_fopen" and "register_globals" variables are enabled, allows remote attackers to execute arbitrary PHP codzeroboard · zeroboard | Medium5.0 | — | 2.3% | Dec 31, 2002 |
21Monitor | CVE-2005-0379No exploit | Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a ..zeroboard · zeroboard | Medium5.0 | — | 1.8% | May 2, 2005 |
20Monitor | CVE-2006-3070No exploit | write_ok.php in Zeroboard 4.1 pl8, when installed on Apache with mod_mime, allows remote attackers to bypass restrictions for uploading filezeroboard · zeroboard | Medium5.0 | — | 1.6% | Jun 19, 2006 |
18Monitor | CVE-2004-2738No exploit | Cross-site scripting (XSS) vulnerability in check_user_id.php in ZeroBoard 4.1pl4 and earlier allows remote attackers to inject arbitrary wezeroboard · zeroboard · CWE-79 | Medium4.3 | — | 1.9% | Dec 31, 2004 |
18Monitor | CVE-2006-1222No exploit | Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTMzeroboard · zeroboard | Medium4.3 | — | 1.8% | Mar 14, 2006 |
17Monitor | CVE-2005-0495No exploit | Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) yezeroboard · zeroboard | Medium4.3 | — | 1.2% | Feb 19, 2005 |
17Monitor | CVE-2012-4744No exploit | Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbitzeroboard · zeroboard · CWE-79 | Medium4.3 | — | 1.2% | Aug 31, 2012 |
- CVE-2005-038031Monitor
Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) err
HighCVSS 7.5No exploitEPSS 4%zeroboard · zeroboardMay 2, 2005
- CVE-2005-182031Monitor
zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the p
HighCVSS 7.5Proof of conceptEPSS 3%zeroboard · zeroboardJun 1, 2005
- CVE-2012-474330Monitor
Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to execute arbitrary S
HighCVSS 7.5No exploitEPSS 1%zeroboard · zeroboardAug 31, 2012
- CVE-2004-141928Monitor
PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PHP code by modifying t
MediumCVSS 6.8No exploitEPSS 2%zeroboard · zeroboardDec 31, 2004
- CVE-2002-170421Monitor
Zeroboard 4.1, when the "allow_url_fopen" and "register_globals" variables are enabled, allows remote attackers to execute arbitrary PHP cod
MediumCVSS 5.0Proof of conceptEPSS 2%zeroboard · zeroboardDec 31, 2002
- CVE-2005-037921Monitor
Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a ..
MediumCVSS 5.0No exploitEPSS 2%zeroboard · zeroboardMay 2, 2005
- CVE-2006-307020Monitor
write_ok.php in Zeroboard 4.1 pl8, when installed on Apache with mod_mime, allows remote attackers to bypass restrictions for uploading file
MediumCVSS 5.0No exploitEPSS 2%zeroboard · zeroboardJun 19, 2006
- CVE-2004-273818Monitor
Cross-site scripting (XSS) vulnerability in check_user_id.php in ZeroBoard 4.1pl4 and earlier allows remote attackers to inject arbitrary we
MediumCVSS 4.3No exploitEPSS 2%zeroboard · zeroboardDec 31, 2004
- CVE-2006-122218Monitor
Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTM
MediumCVSS 4.3No exploitEPSS 2%zeroboard · zeroboardMar 14, 2006
- CVE-2005-049517Monitor
Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) ye
MediumCVSS 4.3No exploitEPSS 1%zeroboard · zeroboardFeb 19, 2005
- CVE-2012-474417Monitor
Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attackers to inject arbit
MediumCVSS 4.3No exploitEPSS 1%zeroboard · zeroboardAug 31, 2012