CVE-2009-4450 Information

Description

Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lat (2) lng and (3) zom parameters which are not properly handled when processed with templates/map.tpl.

Reference

http://forum.intern0t.net/intern0t-advisories/1998-intern0t-livezilla-cross-site-scripting-vulnerability.html http://osvdb.org/61348 http://secunia.com/advisories/37990 http://www.securityfocus.com/archive/1/508613/100/0/threaded