CVE-2013-4168

Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 in the start and end time fields.

• CWE-79

• http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113987.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114008.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/07/25/8Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4168Issue Tracking, Third Party Advisory
• https://github.com/oetiker/SmokePing/commit/bad9f9c28f0939b269f90072aa4cf41f20f15563Permissions Required, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-4168Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113987.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114008.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/07/25/8Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4168Issue Tracking, Third Party Advisory
• https://github.com/oetiker/SmokePing/commit/bad9f9c28f0939b269f90072aa4cf41f20f15563Permissions Required, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-4168Third Party Advisory

Published

Nov 1, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4162The udp_v6_push_pending_frames function in net/ipv6/udp.c in…
• CVE-2013-4163The ip6_append_data_mtu function in net/ipv6/ip6_output.c in…
• CVE-2013-4164Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p48…
• CVE-2013-4165The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.…
• CVE-2013-4166The gpg_ctx_add_recipient function in camel/camel-gpg-contex…7.5
• CVE-2013-4167Cross-site scripting (XSS) vulnerability in CMS Made Simple …
• CVE-2013-4169GNOME Display Manager (gdm) before 2.21.1 allows local users…
• CVE-2013-4170In general, Ember.js escapes or strips any user-supplied con…6.1
• CVE-2013-4171Multiple cross-site scripting (XSS) vulnerabilities in Apach…
• CVE-2013-4172The Red Hat CloudForms Management Engine 5.1 allow remote ad…
• CVE-2013-4173Directory traversal vulnerability in the trend-data daemon (…
• CVE-2013-4174Multiple cross-site scripting (XSS) vulnerabilities in the S…