CVE-2002-1704

Zeroboard 4.1 - Remote Code Execution via _zb_path Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-1704. PoCs published by onlooker.

AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in Zeroboard's _head.php due to insufficient input sanitization. By manipulating the _zb_path parameter, an attacker can include and execute arbitrary PHP code from a remote URL when allow_url_fopen and register_globals are enabled.

Description

Zeroboard 4.1, when the "allow_url_fopen" and "register_globals" variables are enabled, allows remote attackers to execute arbitrary PHP code by modifying the _zb_path parameter to reference a URL on a remote web server that contains the code.

Exploits (1)

exploitdb WORKING POC VERIFIED
by onlooker · textwebappsphp
https://www.exploit-db.com/exploits/21557

This exploit demonstrates a remote file inclusion vulnerability in Zeroboard's _head.php due to insufficient input sanitization. By manipulating the _zb_path parameter, an attacker can include and execute arbitrary PHP code from a remote URL when allow_url_fopen and register_globals are enabled.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Zeroboard (version not specified)
No auth needed
Prerequisites: allow_url_fopen enabled in php.ini · register_globals enabled in php.ini · remote PHP file accessible via URL
mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/5028
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/9366
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://online.securityfocus.com/archive/1/277126

Scores

EPSS 0.0233
EPSS Percentile 81.7%

Details

Status published
Products (1)
zeroboard/zeroboard 4.1_pl2
Published Dec 31, 2002
Tracked Since Feb 18, 2026