CVE-2011-1524

Symantec LiveUpdate Administrator <2.3 - XSS

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2011-1524. PoCs published by Nikolas Sotiriu.

AI-analyzed exploit summary This exploit demonstrates a CSRF vulnerability in Symantec LiveUpdate Administrator, allowing an attacker to inject HTML/JavaScript or add an admin user via a crafted payload. The script sets up a local server to serve malicious HTML when the victim accesses a specific URL.

Description

Cross-site scripting (XSS) vulnerability in the management login GUI page in Symantec LiveUpdate Administrator (LUA) before 2.3 allows remote attackers to inject arbitrary web script or HTML via the username field, as demonstrated by injecting an IFRAME element into the event log, a different vulnerability than CVE-2011-0545.

Exploits (1)

exploitdb WORKING POC
by Nikolas Sotiriu · textwebappswindows
https://www.exploit-db.com/exploits/17026

This exploit demonstrates a CSRF vulnerability in Symantec LiveUpdate Administrator, allowing an attacker to inject HTML/JavaScript or add an admin user via a crafted payload. The script sets up a local server to serve malicious HTML when the victim accesses a specific URL.

Classification
Working Poc 95%
Attack Type
Xss
Complexity
Moderate
Reliability
Reliable
Target: Symantec LiveUpdate Administrator
No auth needed
Prerequisites: Victim must access a crafted URL · Attacker must host a malicious server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/66213
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/46856
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/8166
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/17026
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0727
Exploit vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1025242
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/517109/100/0/threaded

Scores

EPSS 0.0421
EPSS Percentile 89.7%

Details

CWE
CWE-79
Status published
Products (6)
symantec/liveupdate_administrator 2.1.0
symantec/liveupdate_administrator 2.1.2
symantec/liveupdate_administrator 2.1.3
symantec/liveupdate_administrator 2.2.1
symantec/liveupdate_administrator 2.2.2
symantec/liveupdate_administrator < 2.2.2.9
Published Mar 28, 2011
Tracked Since Feb 18, 2026