CVE-2005-0380

CVE-2005-0380 describes multiple remote file inclusion vulnerabilities in ZeroBoard 4.1pl5 and earlier, specifically within print_category.php, login.php, setup.php, ask_password.php, and error.php. An unauthenticated attacker can exploit these flaws by manipulating the 'dir' parameter to include and execute arbitrary PHP code from a remote web server. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, readily available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.