Approved changes feed: RSS · Atom

cpe:2.3:a:livezilla:livezilla:4.0.1.1:*:*:*:*:*:*:*

part: a version: 4.0.1.1 update: *

VendorLivezilla (68148d54-33e3-5ca0-b517-36bd3732ac0f)
ProductLivezilla (3000bd31-fb3f-50ac-9723-84a3b769acc1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-7034 vulnerable 2026-06-08 05:05:08.106683 Details available
The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows remote attackers to execute arbitrary PHP code via a serialized PHP object in a cookie.
Published: 2014-05-05T17:00:00.000Z
Updated: 2024-08-06T17:53:45.947Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7032 vulnerable 2026-06-08 05:05:08.102986 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla before 5.1.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name of an uploaded file or (2) customer name in a resource created from an uploaded file, a different vulnerability than CVE-2013-7003.
Published: 2014-02-14T19:00:00.000Z
Updated: 2024-08-06T17:53:46.033Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7003 vulnerable 2026-06-08 05:05:07.700874 Details available
Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) full name field, (2) company field, or (3) filename to chat.php.
Published: 2014-05-05T17:00:00.000Z
Updated: 2024-08-06T17:53:45.950Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7002 vulnerable 2026-06-08 05:05:07.694895 Details available
Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote attackers to inject arbitrary web script or HTML via the g_language parameter.
Published: 2013-12-21T00:00:00.000Z
Updated: 2024-08-06T17:53:46.028Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6224 vulnerable 2026-06-08 05:04:55.681630 Details available
Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) a name in the call administrator feature, (2) unspecified vectors to the admins visitor information panel, or (3) a text message in a chat session, which is saved in the archive section.
Published: 2013-12-10T16:00:00.000Z
Updated: 2024-08-06T17:29:43.215Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6223 vulnerable 2026-06-08 05:04:55.674221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.