NetSight
medium4.3

CVE-2005-0495

Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page par…

Impact

Cross-site scripting (XSS) vulnerability in ZeroBoard allows remote attackers to inject arbitrary web script or HTML via the (1) sn1, (2) year, or (3) page parameter to zboard.php or (4) filename to view_image.php.

Affected products

VendorProductAffected versions
ZeroboardZeroboard
Versions 4.1_pl2, 4.1_pl3, 4.1_pl4, 4.1_pl5, 4.1_pl6

References