CVE-2013-6808: XSS
First published: Sat Dec 28 2013(Updated: )
Cross-site scripting (XSS) vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web script or HTML via a modified emailAddr field to pickup.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zend Zendto | <=4.11-12 | |
| Zend Zendto | =4.00 | |
| Zend Zendto | =4.01 | |
| Zend Zendto | =4.02 | |
| Zend Zendto | =4.03-3 | |
| Zend Zendto | =4.05-2 | |
| Zend Zendto | =4.06-2 | |
| Zend Zendto | =4.07-1 | |
| Zend Zendto | =4.08-4 | |
| Zend Zendto | =4.09-1 | |
| Zend Zendto | =4.10-4 | |
| Zend Zendto | =4.10-5 | |
| Zend Zendto | =4.11-1 | |
| Zend Zendto | =4.11-2 | |
| Zend Zendto | =4.11-3 | |
| Zend Zendto | =4.11-4 | |
| Zend Zendto | =4.11-5 | |
| Zend Zendto | =4.11-7 | |
| Zend Zendto | =4.11-8 | |
| Zend Zendto | =4.11-9 | |
| Zend Zendto | =4.11-10 | |
| Zend Zendto | =4.11-11 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/nvd-index
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/references
- agent/weakness
- agent/description
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/zend
- canonical/zend zendto
- version/zend zendto/4.11-12
- version/zend zendto/4.00
- version/zend zendto/4.01
- version/zend zendto/4.02
- version/zend zendto/4.03-3
- version/zend zendto/4.05-2
- version/zend zendto/4.06-2
- version/zend zendto/4.07-1
- version/zend zendto/4.08-4
- version/zend zendto/4.09-1
- version/zend zendto/4.10-4
- version/zend zendto/4.10-5
- version/zend zendto/4.11-1
- version/zend zendto/4.11-2
- version/zend zendto/4.11-3
- version/zend zendto/4.11-4
- version/zend zendto/4.11-5
- version/zend zendto/4.11-7
- version/zend zendto/4.11-8
- version/zend zendto/4.11-9
- version/zend zendto/4.11-10
- version/zend zendto/4.11-11