Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2013-6808
Deferred
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-28 Dec, 2013 | 04:53
Updated At-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web script or HTML via a modified emailAddr field to pickup.php.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.04.3MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
CPE Matches
Perforce Software, Inc.
zend
>>zendto>>Versions up to 4.11-12(inclusive)
cpe:2.3:a:zend:zendto:*:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.00
cpe:2.3:a:zend:zendto:4.00:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.01
cpe:2.3:a:zend:zendto:4.01:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.02
cpe:2.3:a:zend:zendto:4.02:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.03-3
cpe:2.3:a:zend:zendto:4.03-3:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.05-2
cpe:2.3:a:zend:zendto:4.05-2:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.06-2
cpe:2.3:a:zend:zendto:4.06-2:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.07-1
cpe:2.3:a:zend:zendto:4.07-1:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.08-4
cpe:2.3:a:zend:zendto:4.08-4:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.09-1
cpe:2.3:a:zend:zendto:4.09-1:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.10-4
cpe:2.3:a:zend:zendto:4.10-4:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.10-5
cpe:2.3:a:zend:zendto:4.10-5:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.11-1
cpe:2.3:a:zend:zendto:4.11-1:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.11-2
cpe:2.3:a:zend:zendto:4.11-2:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.11-3
cpe:2.3:a:zend:zendto:4.11-3:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.11-4
cpe:2.3:a:zend:zendto:4.11-4:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.11-5
cpe:2.3:a:zend:zendto:4.11-5:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.11-7
cpe:2.3:a:zend:zendto:4.11-7:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.11-8
cpe:2.3:a:zend:zendto:4.11-8:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.11-9
cpe:2.3:a:zend:zendto:4.11-9:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.11-10
cpe:2.3:a:zend:zendto:4.11-10:*:*:*:*:*:*:*
Perforce Software, Inc.
zend
>>zendto>>4.11-11
cpe:2.3:a:zend:zendto:4.11-11:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-79Primarynvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://www.zend.to/changelog.phpcve@mitre.org
N/A
https://www.packetlabs.net/cve-2013-6808/cve@mitre.org
Exploit
http://www.zend.to/changelog.phpaf854a3a-2127-422b-91ae-364da2661108
N/A
https://www.packetlabs.net/cve-2013-6808/af854a3a-2127-422b-91ae-364da2661108
Exploit
Change History
0Changes found
Details not found