CVE - CVE-2013-1808

CVE-ID
CVE-2013-1808	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Cross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in ZeroClipboard before 1.0.8, as used in em-shorty, RepRapCalculator, Fulcrum, Django, aCMS, and other products, allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this is might be the same vulnerability as CVE-2013-1463. If so, it is likely that CVE-2013-1463 will be REJECTed.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:20130218 XSS vulnerabilities in ZeroClipboard URL:http://seclists.org/fulldisclosure/2013/Feb/103 MISC:20130220 XSS vulnerabilities in YAML, Multiproject for Trac, UserCollections for Piwigo, TAO and TableTools for DataTables for jQuery URL:http://seclists.org/fulldisclosure/2013/Feb/109 MISC:20130301 XSS vulnerabilities in em-shorty, RepRapCalculator, Fulcrum, Django and aCMS URL:http://seclists.org/fulldisclosure/2013/Mar/5 MISC:20130409 XSS and FPD vulnerabilities in ZeroClipboard in multiple themes for WordPress URL:http://seclists.org/fulldisclosure/2013/Apr/88 MISC:20130418 XSS vulnerabilities in ZeroClipboard in multiple plugins for WordPress URL:http://seclists.org/fulldisclosure/2013/Apr/87 MISC:58257 URL:http://www.securityfocus.com/bid/58257 MISC:[oss-security] 20130302 Re: [Full-disclosure] XSS vulnerabilities in em-shorty, RepRapCalculator, Fulcrum, Django and aCMS - ZeroClipboard.swf URL:http://www.openwall.com/lists/oss-security/2013/03/03/3 MISC:[oss-security] 20130310 WordPress plugins vulnerable to CVE-2013-1808 URL:http://www.openwall.com/lists/oss-security/2013/03/10/2 MISC:[oss-security] 20130324 XSS vulnerabilities in ZeroClipboard and multiple web applications URL:http://www.openwall.com/lists/oss-security/2013/03/25/1 MISC:[oss-security] 20130326 Re: WordPress plugins vulnerable to CVE-2013-1808 URL:http://www.openwall.com/lists/oss-security/2013/03/26/8 MISC:http://securityvulns.ru/docs29103.html URL:http://securityvulns.ru/docs29103.html MISC:http://securityvulns.ru/docs29104.html URL:http://securityvulns.ru/docs29104.html MISC:http://securityvulns.ru/docs29105.html URL:http://securityvulns.ru/docs29105.html MISC:http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-05-02.cb URL:http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-05-02.cb MISC:https://github.com/jonrohan/ZeroClipboard/blob/master/docs/releases.md#zeroclipboard-108 URL:https://github.com/jonrohan/ZeroClipboard/blob/master/docs/releases.md#zeroclipboard-108 MISC:https://github.com/jonrohan/ZeroClipboard/commit/a0e02933f5f7ce5f364fbad36a005f0a349f0696 URL:https://github.com/jonrohan/ZeroClipboard/commit/a0e02933f5f7ce5f364fbad36a005f0a349f0696
Assigning CNA
Red Hat, Inc.
Date Record Created
20130219	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20130219)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.