Korean
<< Back
VID 21999
Severity 40
Port 80, ...
Protocol TCP
Class CGI
Detailed Description The ZeroBoard software is vulnerable to admin authentication. ZeroBoard is a freely available, open source PHP-based bulletin board software, and widely used in Korea. Zeroboard versions 4.1pl9 and earlier are vulnerable to admin authentication, caused by lib.php script functions.

* References:
http://www.xpressengine.com/zb4_security/18448905

* Platforms Affected:
Zeroboard versions 4.1pl9 and earlier
Any operating system Any version
Recommendation Apply the appropriate patch for this vulnerability, as listed in Zeroboard4 site at http://www.xpressengine.com/zb4_security/18448905
Related URL (CVE)
Related URL (SecurityFocus)
Related URL (ISS)