MediumCVSS 6.8
EPSS 4.0%
Public exploit
lib.php in Zeroboard 4.1 pl7 allows remote attackers to execute arbitrary PHP code via a crafted parameter name, possibly related to now_connect.php.