Vulnerability in Zeroboard

CVE-2005-0379

Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the _zb_path parameter to (1) _head.php or (2) outlogin.php, or the dir parameter to (3) write.php.

EPSS: 0.018 (75.7th percentile) — read the EPSS interpretation.

Affected products

Zeroboard — versions 4.1_pl2, 4.1_pl3, 4.1_pl4
N/a — versions n/a

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)