CVE-2005-0380 - Vulnerability Details - OpenCVE

Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that contains the code.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Zeroboard	Zeroboard

Configuration 1 [-]

OR	cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:::::::*
	cpe:2.3:a:zeroboard:zeroboard:4.1_pl3:::::::*
	cpe:2.3:a:zeroboard:zeroboard:4.1_pl4:::::::*
	cpe:2.3:a:zeroboard:zeroboard:4.1_pl5:::::::*

No data.

References

Link	Providers
http://marc.info/?l=bugtraq&m=110565373407474&w=2
http://secunia.com/advisories/13769
http://securitytracker.com/id?1012884
http://www.osvdb.org/12928
http://www.osvdb.org/12929
http://www.osvdb.org/12930
http://www.osvdb.org/12931
http://www.osvdb.org/12932
http://www.securityfocus.com/bid/12206
http://www.securityfocus.com/bid/12258
https://exchange.xforce.ibmcloud.com/vulnerabilities/18892
https://exchange.xforce.ibmcloud.com/vulnerabilities/18893

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-02-13T05:00:00

Updated: 2024-08-07T21:13:53.547Z

Reserved: 2005-02-13T00:00:00

Link: CVE-2005-0380

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2005-05-02T04:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2005-0380

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-01-13T00:00:00", "descriptions": [{"lang": "en", "value": "Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that contains the code."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "12206", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/12206"}, {"name": "1012884", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1012884"}, {"name": "13769", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/13769"}, {"name": "12930", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/12930"}, {"name": "12932", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/12932"}, {"name": "12929", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/12929"}, {"name": "20050113 STG Security Advisory: [SSA-20050113-25] ZeroBoard multiple vulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://marc.info/?l=bugtraq&m=110565373407474&w=2"}, {"name": "zeroboard-printcategory-file-include(18892)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18892"}, {"name": "12931", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/12931"}, {"name": "12258", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/12258"}, {"name": "12928", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/12928"}, {"name": "zeroboard-zero-vote-file-include(18893)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18893"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-0380", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that contains the code."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "12206", "refsource": "BID", "url": "http://www.securityfocus.com/bid/12206"}, {"name": "1012884", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1012884"}, {"name": "13769", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/13769"}, {"name": "12930", "refsource": "OSVDB", "url": "http://www.osvdb.org/12930"}, {"name": "12932", "refsource": "OSVDB", "url": "http://www.osvdb.org/12932"}, {"name": "12929", "refsource": "OSVDB", "url": "http://www.osvdb.org/12929"}, {"name": "20050113 STG Security Advisory: [SSA-20050113-25] ZeroBoard multiple vulnerabilities", "refsource": "BUGTRAQ", "url": "http://marc.info/?l=bugtraq&m=110565373407474&w=2"}, {"name": "zeroboard-printcategory-file-include(18892)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18892"}, {"name": "12931", "refsource": "OSVDB", "url": "http://www.osvdb.org/12931"}, {"name": "12258", "refsource": "BID", "url": "http://www.securityfocus.com/bid/12258"}, {"name": "12928", "refsource": "OSVDB", "url": "http://www.osvdb.org/12928"}, {"name": "zeroboard-zero-vote-file-include(18893)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18893"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T21:13:53.547Z"}, "title": "CVE Program Container", "references": [{"name": "12206", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/12206"}, {"name": "1012884", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1012884"}, {"name": "13769", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/13769"}, {"name": "12930", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/12930"}, {"name": "12932", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/12932"}, {"name": "12929", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/12929"}, {"name": "20050113 STG Security Advisory: [SSA-20050113-25] ZeroBoard multiple vulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=110565373407474&w=2"}, {"name": "zeroboard-printcategory-file-include(18892)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18892"}, {"name": "12931", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/12931"}, {"name": "12258", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/12258"}, {"name": "12928", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/12928"}, {"name": "zeroboard-zero-vote-file-include(18893)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18893"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-0380", "datePublished": "2005-02-13T05:00:00", "dateReserved": "2005-02-13T00:00:00", "dateUpdated": "2024-08-07T21:13:53.547Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*", "matchCriteriaId": "021147FB-D153-440D-95F2-B812FB9DEA19", "vulnerable": true}, {"criteria": "cpe:2.3:a:zeroboard:zeroboard:4.1_pl3:*:*:*:*:*:*:*", "matchCriteriaId": "ABAEFB19-C049-4C09-89CF-00E128FEC5DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:zeroboard:zeroboard:4.1_pl4:*:*:*:*:*:*:*", "matchCriteriaId": "D9FC71F5-C279-40A8-ABC3-5A141D7DF419", "vulnerable": true}, {"criteria": "cpe:2.3:a:zeroboard:zeroboard:4.1_pl5:*:*:*:*:*:*:*", "matchCriteriaId": "837FA51A-A0C2-4BC0-9349-DB220BBB7A42", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that contains the code."}], "id": "CVE-2005-0380", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-05-02T04:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=110565373407474&w=2"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/13769"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1012884"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/12928"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/12929"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/12930"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/12931"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/12932"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/12206"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/12258"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18892"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18893"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=110565373407474&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/13769"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1012884"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/12928"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/12929"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/12930"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/12931"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/12932"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/12206"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/12258"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18892"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18893"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}