zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the preg_replace function.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1822
http://www.securityfocus.com/bid/13823
http://www.securiteam.com/exploits/5KP0V0AFPA.html
http://pandora.sapzil.info/text/notify/20050123.zb41advisory.php