CVE-2013-1808 Zendesk Chat < 1.2.6 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 7.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in ZeroClipboard before 1.0.8, as used in em-shorty, RepRapCalculator, Fulcrum, Django, aCMS, and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this is might be the same vulnerability as CVE-2013-1463. If so, it is likely that CVE-2013-1463 will be REJECTed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/db4o(Debian:12) | All versions | No fix listed |
| debian/db4o(Debian:12) | = 8.0.184.15484+dfsg2-3.1 | No fix listed |
| zeroclipboard project zeroclipboard | <= 1.0.7 | No fix listed |
| zeroclipboard project zeroclipboard | = 1.0.5 | No fix listed |
| wordpress zopim-live-chat(WordPress) | < 1.2.6 | 1.2.6 |
References
- Debian Security Tracker CVE-2013-1808 vendor-advisory
- 20130418 XSS vulnerabilities in ZeroClipboard in multiple plugins for WordPress mailing-list
- 20130409 XSS and FPD vulnerabilities in ZeroClipboard in multiple themes for WordPress mailing-list
- 20130218 XSS vulnerabilities in ZeroClipboard mailing-list
- 20130220 XSS vulnerabilities in YAML, Multiproject for Trac, UserCollections for Piwigo, TAO and TableTools for DataTables for jQuery mailing-list
- 20130301 XSS vulnerabilities in em-shorty, RepRapCalculator, Fulcrum, Django and aCMS mailing-list
- securityvulns.ru
- securityvulns.ru exploit
- securityvulns.ru
- www.cloudbees.com
- [oss-security] 20130302 Re: [Full-disclosure] XSS vulnerabilities in em-shorty, RepRapCalculator, Fulcrum, Django and aCMS - ZeroClipboard.swf mailing-list
- [oss-security] 20130310 WordPress plugins vulnerable to CVE-2013-1808 exploit mailing-list
- [oss-security] 20130324 XSS vulnerabilities in ZeroClipboard and multiple web applications mailing-list
- [oss-security] 20130326 Re: WordPress plugins vulnerable to CVE-2013-1808 mailing-list
- 58257 exploit vdb-entry
- github.com
- github.com
- Wordfence Intelligence third-party-advisory
- www.cve.org