Vulnerabilities > Xpressengine > Zeroboard > 4.1

DATE	CVE	VULNERABILITY TITLE	RISK
2010-05-04	CVE-2009-4834	Code Injection vulnerability in Xpressengine Zeroboard 4.1 lib.php in Zeroboard 4.1 pl7 allows remote attackers to execute arbitrary PHP code via a crafted parameter name, possibly related to now_connect.php. network xpressengine CWE-94	6.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.