CVE-2013-7002 Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote attackers to inject arbitrary web script or HTML via the g_language parameter.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote attackers to inject arbitrary web script or HTML via the g_language parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| livezilla | <= 5.1.0.0 | No fix listed |
| livezilla | = 3.1.8.3 | No fix listed |
| livezilla | = 3.2.0.2 | No fix listed |
| livezilla | = 4.0.1.0 | No fix listed |
| livezilla | = 4.0.1.1 | No fix listed |
| livezilla | = 4.0.1.2 | No fix listed |
| livezilla | = 4.1.0.3 | No fix listed |
| livezilla | = 4.1.0.4 | No fix listed |
| livezilla | = 4.2.0.4 | No fix listed |
| livezilla | = 4.2.0.5 | No fix listed |
| livezilla | = 5.0.1.0 | No fix listed |
| livezilla | = 5.0.1.1 | No fix listed |
| livezilla | = 5.0.1.2 | No fix listed |
| livezilla | = 5.0.1.3 | No fix listed |
| livezilla | = 5.0.1.4 | No fix listed |
References
- 20131208 LiveZilla 5.1.0.0 Reflected XSS in translations exploit mailing-list
- packetstormsecurity.com exploit
- ropchain.org
- 54505 third-party-advisory vendor-advisory
- livezilla-cve20137002-xss(89525) vdb-entry