Unscored CVE-2013-7032 EUVD-2013-6833GHSA-22mf-wg7m-839j

Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla before 5.1.2.1 allow remote attackers to …

Published Feb 14, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla before 5.1.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name of an uploaded file or (2) customer name in a resource created from an uploaded file, a different vulnerability than CVE-2013-7003.

References

20131214 LiveZilla 5.1.2.0 Multiple Stored XSS in webbased operator client mailing-list
livezilla-cve20137032-xss(89809) vdb-entry
101080 vdb-entry
http://www.livezilla.net/board/index.php?/topic/163-livezilla-changelog