CVE-2005-1820 zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the preg_replace function.
HighCVSS 7.5
EPSS 2.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the preg_replace function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zeroboard | = 4.1_pl2 | No fix listed |
| zeroboard | = 4.1_pl3 | No fix listed |
| zeroboard | = 4.1_pl4 | No fix listed |
| zeroboard | = 4.1_pl5 | No fix listed |
References
- pandora.sapzil.info
- www.securiteam.com exploit
- 13823 exploit vdb-entry