Detections
Analytics
LiveZilla < 5.3.0.8 XSS
medium Nessus Plugin ID 79387
Language:
Synopsis
The remote web server contains a PHP application that is affected by an XSS vulnerability.Description
The version of LiveZilla hosted on the remote web server is affected by an XSS vulnerability in the Mobile Client. This flaw is caused by improper validation of user-supplied input. This vulnerability allows an attacker to execute arbitrary code in the context of the victim's browser.Solution
Upgrade to LiveZilla version 5.3.0.8 or later.See Also
Plugin Details
Severity: Medium
ID: 79387
File Name: livezilla_5_3_0_8.nasl
Version: 1.9
Type: remote
Family: CGI abuses : XSS
Published: 11/21/2014
Updated: 5/28/2024
Configuration: Enable thorough checks
Supported Sensors: Nessus
Vulnerability Information
CPE: cpe:/a:livezilla:livezilla
Required KB Items: www/PHP, installed_sw/LiveZilla
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No known exploits are available
Patch Publication Date: 9/25/2014
Vulnerability Publication Date: 9/25/2014
Reference Information
BID: 69683