CVE-2021-27888

概要

参考情報

• zend.to/changelog.php · Release Notes

zendto のその他の脆弱性

• CVE-2020-8986緊急 9.8lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when validating the session cookie, allowing an atta…
• CVE-2020-8985高 8.8ZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user functionality.
• CVE-2020-8984高 7.5lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-For header.
• CVE-2018-1000841中 6.1Zend.To version Prior to 5.15-1 contains a Cross Site Scripting (XSS) vulnerability in The verify.php page that can result in An attacker co…
• CVE-2013-6808中 4.3Cross-site scripting (XSS) vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web scri…