Vulnerabilities > CVE-2005-0379 - File Disclosure vulnerability in Zeroboard
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
Multiple directory traversal vulnerabilities in ZeroBoard 4.1pl5 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the _zb_path parameter to (1) _head.php or (2) outlogin.php, or the dir parameter to (3) write.php.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 |