GCVE - cpe:2.3:a:zend:zendto:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:zend:zendto:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Zend (`c83920c2-ab0f-5e38-ada6-b090c6d186df`)
Product	Zendto (`f403493d-55d0-5f13-b7d0-8f53bfa6756a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-34508`	vulnerable	2026-06-03 15:00:51.793006	ZendTo < 6.15-8 Path Traversal MEDIUM (6.3) A path traversal vulnerability exists in the file dropoff functionality of ZendTo versions 6.15-7 and prior. This could allow a remote, authenticated attacker to retrieve the files of other ZendTo users, retrieve files on the host system, or cause a denial of service. Published: 2025-06-17T14:14:48.419Z Updated: 2026-03-05T12:04:29.593Z Open on db.gcve.eu Reference links https://horizon3.ai/attack-research/attack-blogs/cve-2025-34508-another-file-sharing-application-another-path-traversal/ https://www.vulncheck.com/advisories/zendto-path-traversal	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-32352`	vulnerable	2026-06-03 15:00:40.516799	Details available MEDIUM (4.8) A type confusion vulnerability in lib/NSSAuthenticator.php in ZendTo before v5.04-7 allows remote attackers to bypass authentication for users with passwords stored as MD5 hashes that can be interpreted as numbers. A solution requires moving from MD5 to bcrypt. Published: 2025-04-05T00:00:00.000Z Updated: 2025-04-07T16:21:46.897Z Open on db.gcve.eu Reference links https://projectblack.io/blog/zendto-nday-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-47667`	vulnerable	2026-06-03 14:45:46.845049	Details available CRITICAL (10) An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthenticated remote attackers to execute arbitrary commands via shell metacharacters in the tmp_name parameter when dropping off a file via a POST /dropoff request. Published: 2025-04-05T00:00:00.000Z Updated: 2025-04-07T16:22:26.249Z Open on db.gcve.eu Reference links https://projectblack.io/blog/zendto-nday-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-27888`	vulnerable	2026-06-03 14:44:17.004850	Details available ZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has unexpected characters. Published: 2021-03-02T00:04:08.000Z Updated: 2024-08-03T21:33:17.131Z Open on db.gcve.eu Reference links https://zend.to/changelog.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-1000841`	vulnerable	2026-06-03 14:37:52.896768	Details available Zend.To version Prior to 5.15-1 contains a Cross Site Scripting (XSS) vulnerability in The verify.php page that can result in An attacker could execute arbitrary Javascript code in the context of the victim's browser.. This attack appear to be exploitable via HTTP POST request. This vulnerability appears to have been fixed in 5.16-1 Beta. Published: 2018-12-20T15:00:00.000Z Updated: 2024-09-17T02:15:53.472Z Open on db.gcve.eu Reference links https://zend.to/changelog.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6808`	vulnerable	2026-06-03 14:33:32.628905	Details available Cross-site scripting (XSS) vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web script or HTML via a modified emailAddr field to pickup.php. Published: 2013-12-28T02:00:00.000Z Updated: 2024-08-06T17:46:23.525Z Open on db.gcve.eu Reference links https://www.packetlabs.net/cve-2013-6808/ http://www.zend.to/changelog.php	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.