CVE-2013-7002

Livezilla < 5.1.0.0 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote attackers to inject arbitrary web script or HTML via the g_language parameter.

References (5)

[Exploit] http://archives.neohapsis.com/archives/bugtraq/2013-12/0032.html

[Exploit] http://packetstormsecurity.com/files/124344

[Various Sources] http://ropchain.org/advisories/CVE-2013-7002.txt

[Vendor Advisory] http://secunia.com/advisories/54505

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/89525

Scores

EPSS 0.0034

EPSS Percentile 56.4%

Details

CWE

CWE-79

Status published

Products (16)

livezilla/livezilla < 5.1.0.0

livezilla/livezilla

... and 6 more

Published Dec 21, 2013

Tracked Since Feb 18, 2026