CVE-2013-7003 Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) full name field, (2) company field, or (3) fil...
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) full name field, (2) company field, or (3) filename to chat.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| livezilla | <= 5.1.1.0 | No fix listed |
| livezilla | = 3.1.8.3 | No fix listed |
| livezilla | = 3.2.0.2 | No fix listed |
| livezilla | = 4.0.1.0 | No fix listed |
| livezilla | = 4.0.1.1 | No fix listed |
| livezilla | = 4.0.1.2 | No fix listed |
| livezilla | = 4.1.0.3 | No fix listed |
| livezilla | = 4.1.0.4 | No fix listed |
| livezilla | = 4.2.0.4 | No fix listed |
| livezilla | = 4.2.0.5 | No fix listed |
| livezilla | = 5.0.1.0 | No fix listed |
| livezilla | = 5.0.1.1 | No fix listed |
| livezilla | = 5.0.1.2 | No fix listed |
| livezilla | = 5.0.1.3 | No fix listed |
| livezilla | = 5.0.1.4 | No fix listed |
| livezilla | = 5.1.0.0 | No fix listed |
References
- 100828 vdb-entry
- packetstormsecurity.com exploit
- 20131210 LiveZilla 5.1.1.0 Stored XSS in operator clients mailing-list
- 64202 vdb-entry