Vulnerability in Zeroboard

CVE-2005-0495

Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page parameter to zboard.php or (4) filename to view_image.php.

EPSS: 0.012 (64.0th percentile) — read the EPSS interpretation.

Affected products

Zeroboard — versions 4.1_pl2, 4.1_pl3, 4.1_pl4
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK, Vendor Advisory)