PatchTheCVEzeroboard vulnerabilities
Recent CVEs affecting zeroboard products. 9 tracked.
zeroboard has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-06-19. Highest priority: CVE-2005-0380 (score 54/100).
- CVE-2006-3070 MEDIUM 5.0 DOWNGRADE write_ok.php in Zeroboard 4.1 pl8, when installed on Apache with mod_mime, allows remote attackers to bypass r
- CVE-2006-1222 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inje
- CVE-2005-1820 HIGH 7.5 DOWNGRADE zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via imp
- CVE-2005-0495 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script o
- CVE-2005-0380 HIGH 7.5 DOWNGRADE Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4
- CVE-2005-0379 MEDIUM 5.0 DOWNGRADE Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read ar
- CVE-2004-2738 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in check_user_id.php in ZeroBoard 4.1pl4 and earlier allows remote at
- CVE-2004-1419 MEDIUM 6.8 DOWNGRADE PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arb
- CVE-2002-1704 MEDIUM 5.0 DOWNGRADE Zeroboard 4.1, when the "allow_url_fopen" and "register_globals" variables are enabled, allows remote attacker
FAQ
How do I fix zeroboard vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zeroboard being exploited right now?
None of the tracked zeroboard CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zeroboard CVE should I patch first?
CVE-2005-0380 currently ranks highest (54/100): Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4.