CVE-2005-0495

Published: Feb 19, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page parameter to zboard.php or (4) filename to view_image.php.

Affected (5)

Products: Zeroboard: Zeroboard

Zeroboard

1 product

Zeroboard

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Zeroboard Zeroboard	Version 4.1_pl2
Zeroboard Zeroboard	Version 4.1_pl3
Zeroboard Zeroboard	Version 4.1_pl4
Zeroboard Zeroboard	Version 4.1_pl5
Zeroboard Zeroboard	Version 4.1_pl6

References (6)

http://marc.info/?l=bugtraq&m=110884332105513&w=2

Source: cve@mitre.org

http://securitytracker.com/id?1013243

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/19420

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110884332105513&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1013243

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/19420

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.