lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-For header.
The product does not properly verify that the source of data or communication is valid.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Zendto | Zend | 3.10 (including) | 3.10 (including) |
| Zendto | Zend | 3.11 (including) | 3.11 (including) |
| Zendto | Zend | 3.12 (including) | 3.12 (including) |
| Zendto | Zend | 3.13 (including) | 3.13 (including) |
| Zendto | Zend | 3.20 (including) | 3.20 (including) |
| Zendto | Zend | 3.51 (including) | 3.51 (including) |
| Zendto | Zend | 3.52 (including) | 3.52 (including) |
| Zendto | Zend | 3.53 (including) | 3.53 (including) |
| Zendto | Zend | 3.54 (including) | 3.54 (including) |
| Zendto | Zend | 3.55 (including) | 3.55 (including) |
| Zendto | Zend | 3.56-2 (including) | 3.56-2 (including) |
| Zendto | Zend | 3.57 (including) | 3.57 (including) |
| Zendto | Zend | 3.58 (including) | 3.58 (including) |
| Zendto | Zend | 3.59 (including) | 3.59 (including) |
| Zendto | Zend | 3.60 (including) | 3.60 (including) |
| Zendto | Zend | 3.61 (including) | 3.61 (including) |
| Zendto | Zend | 3.62 (including) | 3.62 (including) |
| Zendto | Zend | 3.63 (including) | 3.63 (including) |
| Zendto | Zend | 3.64 (including) | 3.64 (including) |
| Zendto | Zend | 3.65 (including) | 3.65 (including) |
| Zendto | Zend | 3.70-2 (including) | 3.70-2 (including) |
| Zendto | Zend | 3.71 (including) | 3.71 (including) |
| Zendto | Zend | 3.72 (including) | 3.72 (including) |
| Zendto | Zend | 3.73 (including) | 3.73 (including) |
| Zendto | Zend | 3.74 (including) | 3.74 (including) |
| Zendto | Zend | 3.75 (including) | 3.75 (including) |
| Zendto | Zend | 3.90 (including) | 3.90 (including) |
| Zendto | Zend | 3.91 (including) | 3.91 (including) |
| Zendto | Zend | 3.92 (including) | 3.92 (including) |
| Zendto | Zend | 3.93 (including) | 3.93 (including) |
| Zendto | Zend | 3.94 (including) | 3.94 (including) |
| Zendto | Zend | 4.00 (including) | 4.00 (including) |
| Zendto | Zend | 4.01 (including) | 4.01 (including) |
| Zendto | Zend | 4.02 (including) | 4.02 (including) |
| Zendto | Zend | 4.03-3 (including) | 4.03-3 (including) |
| Zendto | Zend | 4.05-2 (including) | 4.05-2 (including) |
| Zendto | Zend | 4.06-2 (including) | 4.06-2 (including) |
| Zendto | Zend | 4.07-1 (including) | 4.07-1 (including) |
| Zendto | Zend | 4.08-4 (including) | 4.08-4 (including) |
| Zendto | Zend | 4.09-1 (including) | 4.09-1 (including) |
| Zendto | Zend | 4.10-4 (including) | 4.10-4 (including) |
| Zendto | Zend | 4.10-5 (including) | 4.10-5 (including) |
| Zendto | Zend | 4.11-1 (including) | 4.11-1 (including) |
| Zendto | Zend | 4.11-2 (including) | 4.11-2 (including) |
| Zendto | Zend | 4.11-3 (including) | 4.11-3 (including) |
| Zendto | Zend | 4.11-4 (including) | 4.11-4 (including) |
| Zendto | Zend | 4.11-5 (including) | 4.11-5 (including) |
| Zendto | Zend | 4.11-7 (including) | 4.11-7 (including) |
| Zendto | Zend | 4.11-8 (including) | 4.11-8 (including) |
| Zendto | Zend | 4.11-9 (including) | 4.11-9 (including) |
| Zendto | Zend | 4.11-10 (including) | 4.11-10 (including) |
| Zendto | Zend | 4.11-11 (including) | 4.11-11 (including) |
| Zendto | Zend | 4.11-12 (including) | 4.11-12 (including) |
| Zendto | Zend | 4.11-13 (including) | 4.11-13 (including) |
| Zendto | Zend | 4.11-14 (including) | 4.11-14 (including) |
| Zendto | Zend | 4.12-5 (including) | 4.12-5 (including) |
| Zendto | Zend | 4.12-6 (including) | 4.12-6 (including) |
| Zendto | Zend | 4.13-1 (including) | 4.13-1 (including) |
| Zendto | Zend | 4.20-2 (including) | 4.20-2 (including) |
| Zendto | Zend | 4.20-3 (including) | 4.20-3 (including) |
| Zendto | Zend | 4.20-5 (including) | 4.20-5 (including) |
| Zendto | Zend | 4.20-6 (including) | 4.20-6 (including) |
| Zendto | Zend | 4.20-7 (including) | 4.20-7 (including) |
| Zendto | Zend | 4.25-3 (including) | 4.25-3 (including) |
| Zendto | Zend | 4.27-1 (including) | 4.27-1 (including) |
| Zendto | Zend | 4.27-2 (including) | 4.27-2 (including) |
| Zendto | Zend | 4.27-4 (including) | 4.27-4 (including) |
| Zendto | Zend | 4.27-5 (including) | 4.27-5 (including) |
| Zendto | Zend | 4.27-6 (including) | 4.27-6 (including) |
| Zendto | Zend | 4.27-7 (including) | 4.27-7 (including) |
| Zendto | Zend | 4.28-1 (including) | 4.28-1 (including) |
| Zendto | Zend | 4.28-2 (including) | 4.28-2 (including) |
| Zendto | Zend | 5.00-1 (including) | 5.00-1 (including) |
| Zendto | Zend | 5.00-2 (including) | 5.00-2 (including) |
| Zendto | Zend | 5.01-5 (including) | 5.01-5 (including) |
| Zendto | Zend | 5.02-5 (including) | 5.02-5 (including) |
| Zendto | Zend | 5.03-1 (including) | 5.03-1 (including) |
| Zendto | Zend | 5.04-7 (including) | 5.04-7 (including) |
| Zendto | Zend | 5.09-13 (including) | 5.09-13 (including) |
| Zendto | Zend | 5.10-1 (including) | 5.10-1 (including) |
| Zendto | Zend | 5.10-2 (including) | 5.10-2 (including) |
| Zendto | Zend | 5.11-1 (including) | 5.11-1 (including) |
| Zendto | Zend | 5.11-2 (including) | 5.11-2 (including) |
| Zendto | Zend | 5.11-3 (including) | 5.11-3 (including) |
| Zendto | Zend | 5.11-4 (including) | 5.11-4 (including) |
| Zendto | Zend | 5.11-5 (including) | 5.11-5 (including) |
| Zendto | Zend | 5.11-6 (including) | 5.11-6 (including) |
| Zendto | Zend | 5.12-3-beta (including) | 5.12-3-beta (including) |
| Zendto | Zend | 5.12-4-beta (including) | 5.12-4-beta (including) |
| Zendto | Zend | 5.12-6-beta (including) | 5.12-6-beta (including) |
| Zendto | Zend | 5.12-7-beta (including) | 5.12-7-beta (including) |
| Zendto | Zend | 5.12-8-beta (including) | 5.12-8-beta (including) |
| Zendto | Zend | 5.13-1 (including) | 5.13-1 (including) |
| Zendto | Zend | 5.13-2 (including) | 5.13-2 (including) |
| Zendto | Zend | 5.14-2-beta (including) | 5.14-2-beta (including) |
| Zendto | Zend | 5.14-5-beta (including) | 5.14-5-beta (including) |
| Zendto | Zend | 5.15-1 (including) | 5.15-1 (including) |
| Zendto | Zend | 5.16-1-beta (including) | 5.16-1-beta (including) |
| Zendto | Zend | 5.16-4-beta (including) | 5.16-4-beta (including) |
| Zendto | Zend | 5.16-5-beta (including) | 5.16-5-beta (including) |
| Zendto | Zend | 5.16-7-beta (including) | 5.16-7-beta (including) |
| Zendto | Zend | 5.16-8-beta (including) | 5.16-8-beta (including) |
| Zendto | Zend | 5.16.6-beta (including) | 5.16.6-beta (including) |
| Zendto | Zend | 5.17-1 (including) | 5.17-1 (including) |
| Zendto | Zend | 5.17-2 (including) | 5.17-2 (including) |
| Zendto | Zend | 5.17-3 (including) | 5.17-3 (including) |
| Zendto | Zend | 5.17-4 (including) | 5.17-4 (including) |
| Zendto | Zend | 5.17-5-beta (including) | 5.17-5-beta (including) |
| Zendto | Zend | 5.17-6 (including) | 5.17-6 (including) |
| Zendto | Zend | 5.18-1-beta (including) | 5.18-1-beta (including) |
| Zendto | Zend | 5.18-2-beta (including) | 5.18-2-beta (including) |
| Zendto | Zend | 5.19-1-production (including) | 5.19-1-production (including) |
| Zendto | Zend | 5.20-1-beta (including) | 5.20-1-beta (including) |
| Zendto | Zend | 5.20-2-beta (including) | 5.20-2-beta (including) |
| Zendto | Zend | 5.20-3-beta (including) | 5.20-3-beta (including) |
| Zendto | Zend | 5.20-5-beta (including) | 5.20-5-beta (including) |
| Zendto | Zend | 5.20-6-beta (including) | 5.20-6-beta (including) |
| Zendto | Zend | 5.20-7-beta (including) | 5.20-7-beta (including) |
| Zendto | Zend | 5.20-8-beta (including) | 5.20-8-beta (including) |
| Zendto | Zend | 5.20-9-beta (including) | 5.20-9-beta (including) |
| Zendto | Zend | 5.21-1-production (including) | 5.21-1-production (including) |
| Zendto | Zend | 5.21-2-production (including) | 5.21-2-production (including) |
| Zendto | Zend | 5.22-1-beta (including) | 5.22-1-beta (including) |