Arbitrary PHP Code Execution in Zeroboard 4.1pl2 to 4.1pl5 via Improper Quoting in zboard.php

Arbitrary PHP Code Execution in Zeroboard 4.1pl2 to 4.1pl5 via Improper Quoting in zboard.php

CVE-2005-1820 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the preg_replace function.

Learn more about our Web Application Penetration Testing UK.