Multiple XSS vulnerabilities in LiveZilla before 5.1.1.
Reporter | Title | Published | Views | Family All 6 |
---|---|---|---|---|
![]() | Cross site scripting | 10 Dec 201316:11 | – | prion |
![]() | LiveZilla Cross Site Scripting | 29 Nov 201300:00 | – | packetstorm |
![]() | CVE-2013-6224 | 10 Dec 201316:00 | – | cvelist |
![]() | CVE-2013-6224 | 10 Dec 201316:11 | – | nvd |
![]() | LiveZilla 'g_language' Parameter Cross Site Scripting Vulnerability | 17 Dec 201300:00 | – | openvas |
![]() | LiveZilla < 5.1.1.0 Multiple Vulnerabilities | 14 Dec 201300:00 | – | nessus |
Source | Link |
---|---|
cureblog | www.cureblog.de/2013/12/cve-2013-6224-cross-site-scripting-in-livezilla |
livezilla | www.livezilla.net/board/index.php |
osvdb | www.osvdb.org/100401 |
packetstormsecurity | www.packetstormsecurity.com/files/124222 |
osvdb | www.osvdb.org/100402 |
exchange | www.exchange.xforce.ibmcloud.com/vulnerabilities/89315 |
seclists | www.seclists.org/fulldisclosure/2013/Nov/208 |
osvdb | www.osvdb.org/100399 |
Parameter | Position | Path | Description | CWE |
---|---|---|---|---|
name | request body | /path/to/admin/feature | Cross-site scripting (XSS) vulnerability through input in the call administrator feature. | CWE-79 |
unspecified | request body | /path/to/admin/visitor/information | Cross-site scripting (XSS) vulnerability allowing modification of the admin's view via visitor information panel. | CWE-79 |
text message | request body | /path/to/chat/session/archive | Cross-site scripting (XSS) vulnerability in chat session allowing execution of code when viewing archive. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo