The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows remote attackers to execute arbitrary PHP code via a serialized PHP object in a cookie.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2014-05-05 10:06
Updated : 2017-08-28 18:34
NVD link : CVE-2013-7034
Mitre link : CVE-2013-7034
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
livezilla
- livezilla