Zend Zendto vulnerabilities
8 known vulnerabilities affecting zend/zendto.
Total CVEs
8
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH2MEDIUM4
Vulnerabilities
Page 1 of 1
CVE-2021-47667P1CRITICALCVSS 10.0≥ 5.24-3, < 6.10-72025-04-05
CVE-2021-47667 [CRITICAL] CWE-78 CVE-2021-47667: An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10
An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthenticated remote attackers to execute arbitrary commands via shell metacharacters in the tmp_name parameter when dropping off a file via a POST /dropoff request.
nvd
CVE-2020-8986P3CRITICALCVSS 9.8v3.10v3.11+121 more2020-03-24
CVE-2020-8986 [CRITICAL] CWE-754 CVE-2020-8986: lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when validat
lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when validating the session cookie, allowing an attacker to gain administrative access with a large number of requests.
nvd
CVE-2020-8984P4HIGHCVSS 7.5v3.10v3.11+121 more2020-03-24
CVE-2020-8984 [HIGH] CWE-346 CVE-2020-8984: lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-Fo
lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-For header.
nvd
CVE-2020-8985P4HIGHCVSS 8.8v3.10v3.11+121 more2020-03-24
CVE-2020-8985 [HIGH] CWE-79 CVE-2020-8985: ZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user functional
ZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user functionality.
nvd
CVE-2025-32352P4MEDIUMCVSS 4.8fixed in 5.04-72025-04-05
CVE-2025-32352 [MEDIUM] CWE-843 CVE-2025-32352: A type confusion vulnerability in lib/NSSAuthenticator.php in ZendTo before v5.04-7 allows remote at
A type confusion vulnerability in lib/NSSAuthenticator.php in ZendTo before v5.04-7 allows remote attackers to bypass authentication for users with passwords stored as MD5 hashes that can be interpreted as numbers. A solution requires moving from MD5 to bcrypt.
nvd
CVE-2018-1000841P4MEDIUMCVSS 6.1fixed in 5.15-12018-12-20
CVE-2018-1000841 [MEDIUM] CWE-79 CVE-2018-1000841: Zend.To version Prior to 5.15-1 contains a Cross Site Scripting (XSS) vulnerability in The verify.ph
Zend.To version Prior to 5.15-1 contains a Cross Site Scripting (XSS) vulnerability in The verify.php page that can result in An attacker could execute arbitrary Javascript code in the context of the victim's browser.. This attack appear to be exploitable via HTTP POST request. This vulnerability appears to have been fixed in 5.16-1 Beta.
nvd
CVE-2021-27888P4MEDIUMCVSS 6.1≤ 6.05-4v6.06-1+2 more2021-03-02
CVE-2021-27888 [MEDIUM] CWE-79 CVE-2021-27888: ZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has unexpe
ZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has unexpected characters.
nvd
CVE-2013-6808P4MEDIUMCVSS 4.3≤ 4.11-12v4.00+20 more2013-12-28
CVE-2013-6808 [MEDIUM] CWE-79 CVE-2013-6808: Cross-site scripting (XSS) vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remot
Cross-site scripting (XSS) vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web script or HTML via a modified emailAddr field to pickup.php.
nvd