Approved changes feed: RSS · Atom

cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*

part: a version: 4.1_pl2 update: *

VendorZeroboard (c09b33b8-b1a2-51a4-a576-48783459c577)
ProductZeroboard (bff22e57-e6ff-57de-bbc2-31bf067d0367)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/hellozeronet/zeroboard purl2cpe 2026-06-01 10:12:59.110682

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-1222 vulnerable 2026-06-08 04:48:56.566297 Details available
Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the (1) memo box title, (2) user email, and (3) homepage fields.
Published: 2006-03-14T11:00:00.000Z
Updated: 2024-08-07T17:03:28.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1820 vulnerable 2026-06-08 04:48:27.617698 Details available
zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the preg_replace function.
Published: 2005-06-01T04:00:00.000Z
Updated: 2024-08-07T22:06:57.071Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0495 vulnerable 2026-06-08 04:48:12.822903 Details available
Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page parameter to zboard.php or (4) filename to view_image.php.
Published: 2005-02-21T05:00:00.000Z
Updated: 2024-08-07T21:13:54.455Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0380 vulnerable 2026-06-08 04:48:12.502632 Details available
Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that contains the code.
Published: 2005-02-13T05:00:00.000Z
Updated: 2024-08-07T21:13:53.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0379 vulnerable 2026-06-08 04:48:12.500628 Details available
Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the _zb_path parameter to (1) _head.php or (2) outlogin.php, or the dir parameter to (3) write.php.
Published: 2005-02-13T05:00:00.000Z
Updated: 2024-08-07T21:13:53.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2738 vulnerable 2026-06-08 04:48:10.719503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1419 vulnerable 2026-06-08 04:47:54.018270 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1704 vulnerable 2026-06-08 04:47:17.876031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.