| Package | Affected versions | Patched versions |
|---|---|---|
| livezilla | = 3.1.8.3= 3.2.0.2= 4.0.1.0= 4.0.1.1= 4.0.1.2= 4.1.0.3= 4.1.0.4= 4.2.0.4= 4.2.0.5= 5.0.1.0= 5.0.1.1= 5.0.1.2= 5.0.1.3= 5.0.1.4= 5.1.0.0= 5.1.1.0≤ 5.1.2.0 |
The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows remote attackers to execute arbitrary PHP code via a serialized PHP object in a cookie.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free