CVE-2013-7034

Published: May 5, 2014Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows remote attackers to execute arbitrary PHP code via a serialized PHP object in a cookie.

Affected (17)

Products: Livezilla: Livezilla

Livezilla

1 product

Livezilla

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Livezilla Livezilla	Up to 5.1.2.0
Livezilla Livezilla	Version 3.1.8.3
Livezilla Livezilla	Version 3.2.0.2
Livezilla Livezilla	Version 4.0.1.0
Livezilla Livezilla	Version 4.0.1.1
Livezilla Livezilla	Version 4.0.1.2
Livezilla Livezilla	Version 4.1.0.3
Livezilla Livezilla	Version 4.1.0.4
Livezilla Livezilla	Version 4.2.0.4
Livezilla Livezilla	Version 4.2.0.5
Livezilla Livezilla	Version 5.0.1.0
Livezilla Livezilla	Version 5.0.1.1
Livezilla Livezilla	Version 5.0.1.2
Livezilla Livezilla	Version 5.0.1.3
Livezilla Livezilla	Version 5.0.1.4
Livezilla Livezilla	Version 5.1.0.0
Livezilla Livezilla	Version 5.1.1.0