CVE-2013-7025

Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.

• CWE-79

• http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.htmlThird Party Advisory
• http://osvdb.org/100610Broken Link
• http://seclists.org/fulldisclosure/2013/Dec/32Exploit, Mailing List, Third Party Advisory
• http://secunia.com/advisories/55923Third Party Advisory
• http://www.exploit-db.com/exploits/30054Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/64103Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1029433Third Party Advisory, VDB Entry
• http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdfVendor Advisory
• http://www.vulnerability-lab.com/get_content.php?id=1099Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89462VDB Entry
• http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.htmlThird Party Advisory
• http://osvdb.org/100610Broken Link
• http://seclists.org/fulldisclosure/2013/Dec/32Exploit, Mailing List, Third Party Advisory
• http://secunia.com/advisories/55923Third Party Advisory
• http://www.exploit-db.com/exploits/30054Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/64103Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1029433Third Party Advisory, VDB Entry
• http://www.sonicwall.com/us/shared/download/Support_Bulletin_GMS_Vulnerability_Hotfix_134235.pdfVendor Advisory
• http://www.vulnerability-lab.com/get_content.php?id=1099Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89462VDB Entry

Published

Dec 9, 2013

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-7019The get_cox function in libavcodec/jpeg2000dec.c in FFmpeg b…
• CVE-2013-7020The read_header function in libavcodec/ffv1dec.c in FFmpeg b…
• CVE-2013-7021The filter_frame function in libavfilter/vf_fps.c in FFmpeg …
• CVE-2013-7022The g2m_init_buffers function in libavcodec/g2meet.c in FFmp…
• CVE-2013-7023The ff_combine_frame function in libavcodec/parser.c in FFmp…
• CVE-2013-7024The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.…
• CVE-2013-7026Multiple race conditions in ipc/shm.c in the Linux kernel be…
• CVE-2013-7027The ieee80211_radiotap_iterator_init function in net/wireles…
• CVE-2013-7030The TFTP service in Cisco Unified Communications Manager (ak…7.3
• CVE-2013-7032Multiple cross-site scripting (XSS) vulnerabilities in the w…
• CVE-2013-7033LiveZilla before 5.1.2.1 includes the operator password in p…
• CVE-2013-7034The setCookieValue function in _lib/functions.global.inc.php…