CVE-2013-7032

Published: Feb 14, 2014Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla before 5.1.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name of an uploaded file or (2) customer name in a resource created from an uploaded file, a different vulnerability than CVE-2013-7003.

Affected (17)

Products: Livezilla: Livezilla

Livezilla

1 product

Livezilla

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Livezilla Livezilla	Up to 5.1.2.0
Livezilla Livezilla	Version 3.1.8.3
Livezilla Livezilla	Version 3.2.0.2
Livezilla Livezilla	Version 4.0.1.0
Livezilla Livezilla	Version 4.0.1.1
Livezilla Livezilla	Version 4.0.1.2
Livezilla Livezilla	Version 4.1.0.3
Livezilla Livezilla	Version 4.1.0.4
Livezilla Livezilla	Version 4.2.0.4
Livezilla Livezilla	Version 4.2.0.5
Livezilla Livezilla	Version 5.0.1.0
Livezilla Livezilla	Version 5.0.1.1
Livezilla Livezilla	Version 5.0.1.2
Livezilla Livezilla	Version 5.0.1.3
Livezilla Livezilla	Version 5.0.1.4
Livezilla Livezilla	Version 5.1.0.0
Livezilla Livezilla	Version 5.1.1.0