CVE-2013-6225

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.exploit-db.com/exploits/29672Exploit, Third Party Advisory, VDB Entry
https://curesec.com/de/veroeffentlichungen/advisories.htmlThird Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/89051Third Party Advisory, VDB Entry
http://www.exploit-db.com/exploits/29672Exploit, Third Party Advisory, VDB Entry
https://curesec.com/de/veroeffentlichungen/advisories.htmlThird Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/89051Third Party Advisory, VDB Entry

Timeline

Published: Jan 13, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-62268.5Directory traversal vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 CVE-2013-62277.5Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5 CVE-2013-62294.3Multiple cross-site scripting (XSS) vulnerabilities in Atmail Webmail Server 7.0.2 allow remote attackers to inject arbitrary web script or CVE-2013-62306.8The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6-ESV-R10-P1, 9.8 before 9.8.6-P1, 9.9 befor CVE-2013-62318.8SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script CVE-2013-62323.5Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via CVE-2013-62334.3Cross-site scripting (XSS) vulnerability in SpagoBI before 4.1 allows remote authenticated users to inject arbitrary web script or HTML via CVE-2013-62348.0Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrar CVE-2013-62354.3Multiple cross-site scripting (XSS) vulnerabilities in JAMon (Java Application Monitor) 2.7 and earlier allow remote attackers to inject arb CVE-2013-62369.8IZON IP 2.0.2: hard-coded password vulnerability CVE-2013-62373.5The ISL Desktop plugin for Windows before 1.4.7 for ISL Light 3.5.4 and earlier allows remote authenticated users to obtain sensitive inform CVE-2013-62396.1Cross-site scripting (XSS) vulnerability in the photo gallery model in Exis Contexis before 2.0 allows remote attackers to inject arbitrary