CVE-2013-7385

LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which…

published May 19, 2014

CVSS
—
EPSS
1%
Percentile
69.6
In the wild
Unconfirmed
What it is

LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which allows remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an independent cross-site scripting (XSS) attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7033.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01268 · 69.6th percentile
Published
2014-05-19T14:00Z
EPSS history
Timeline
  • 19 MAY 14:00Z
    LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which…
    cvelistv5