Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2020-8984
Disclosure Date: March 24, 2020 (last updated February 21, 2025)
lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-For header.
0
Attacker Value
Unknown
CVE-2020-8986
Disclosure Date: March 24, 2020 (last updated February 21, 2025)
lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when validating the session cookie, allowing an attacker to gain administrative access with a large number of requests.
0
Attacker Value
Unknown
CVE-2020-8985
Disclosure Date: March 24, 2020 (last updated February 21, 2025)
ZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user functionality.
0
