What is CVE-2002-1704?

CVE-2002-1704 is a vulnerability in Zeroboard. Published 2002-12-31.

Is CVE-2002-1704 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Zeroboard

CVE-2002-1704

Zeroboard 4.1, when the "allow_url_fopen" and "register_globals" variables are enabled, allows remote attackers to execute arbitrary PHP code by modifying the _zb_path parameter to reference a URL on a remote web server that contains the code.

EPSS: 0.023 (81.8th percentile) — read the EPSS interpretation.

Affected products

Zeroboard — versions 4.1_pl2
N/a — versions n/a

Public proof-of-concept exploits

alyaqasrina/Innovators-Group

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)

Frequently asked questions

What is CVE-2002-1704?: CVE-2002-1704 is a vulnerability in Zeroboard. Published 2002-12-31.
Is CVE-2002-1704 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.