vendor:
ZeroBoard
by:
str0ke
7.5
CVSS
HIGH
Arbitrary Code Injection
94
CWE
Product Name: ZeroBoard
Affected Version From: All versions of ZeroBoard
Affected Version To: All versions of ZeroBoard
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
Unknown
ZeroBoard Arbitrary PHP Code Injection
The worm exploits a vulnerability in ZeroBoard, allowing an attacker to inject arbitrary PHP code.
Mitigation:
Update to the latest version of ZeroBoard.