CVE-2005-1820
Zeroboard 4.1pl2-4.1pl5 - Remote Code Execution via preg_replace Function
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-1820. PoCs published by n0gada.
AI-analyzed exploit summary This exploit targets a preg_replace vulnerability in Zeroboard 4.1 pl2 to pl5, allowing remote command execution by uploading a malicious PHP script via crafted form data. The exploit automates the process of writing a post, exploiting the vulnerability, confirming the backdoor, and cleaning up.
Description
zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the preg_replace function.
Exploits (1)
This exploit targets a preg_replace vulnerability in Zeroboard 4.1 pl2 to pl5, allowing remote command execution by uploading a malicious PHP script via crafted form data. The exploit automates the process of writing a post, exploiting the vulnerability, confirming the backdoor, and cleaning up.