CVEvulnerability
CVE-2009-4450
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-12-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lat, (2) lng, and (3) zom parameters, which are not properly handled when processed with templates/map.tpl.
Affected configurations
• livezilla livezilla 3.1.8.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://forum.intern0t.net/intern0t-advisories/1998-intern0t-livezilla-cross-site-scripting-vulnerability.html Exploit
- http://osvdb.org/61348 osvdb.org
- http://secunia.com/advisories/37990 Vendor Advisory
- http://www.securityfocus.com/archive/1/508613/100/0/threaded www.securityfocus.com
- http://forum.intern0t.net/intern0t-advisories/1998-intern0t-livezilla-cross-site-scripting-vulnerability.html Exploit
- http://osvdb.org/61348 osvdb.org
- http://secunia.com/advisories/37990 Vendor Advisory
- http://www.securityfocus.com/archive/1/508613/100/0/threaded www.securityfocus.com