Unrated severityNVD Advisory· Published May 2, 2005· Updated Apr 16, 2026

CVE-2005-0380

Description

Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) error.php in ZeroBoard 4.1pl5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the dir parameter to reference a URL on a remote web server that contains the code.

Affected products

Zeroboard/Zeroboard4 versions
cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*
- cpe:2.3:a:zeroboard:zeroboard:4.1_pl3:*:*:*:*:*:*:*
- cpe:2.3:a:zeroboard:zeroboard:4.1_pl4:*:*:*:*:*:*:*
- cpe:2.3:a:zeroboard:zeroboard:4.1_pl5:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/13769nvdPatchVendor Advisory
www.securityfocus.com/bid/12206nvdExploit
www.securityfocus.com/bid/12258nvdExploit
marc.infonvd
securitytracker.com/idnvd
www.osvdb.org/12928nvd
www.osvdb.org/12929nvd
www.osvdb.org/12930nvd
www.osvdb.org/12931nvd
www.osvdb.org/12932nvd
exchange.xforce.ibmcloud.com/vulnerabilities/18892nvd
exchange.xforce.ibmcloud.com/vulnerabilities/18893nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000