PT-2014-3248

Name of the Vulnerable Software and Affected Versions LiveZilla versions prior to 5.1.2.1 Description The issue allows remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an independent cross-site scripting XSS attack...

CVE-2013-7033: Undefined Security Weakness

LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which might allow remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an independent...

CVE-2013-7385: Undefined Security Weakness

LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which allows remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an...

PT-2014-3409

Name of the Vulnerable Software and Affected Versions LiveZilla versions 5.1.2.1 and earlier Description The issue allows remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an independent cross-site scripting XSS attac...