TI-2013-05237 CVE-2013-6225 · GHSA-2x9w-m9r8-rmvq
LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability
Priority MEDIUM 64
LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability
Livezilla
Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Livezilla records in CISA KEVNo Livezilla vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
21 records in Livezilla · all components
TI-2020-07843 CVE-2020-9758 · GHSA-m978-hcqw-jcmw
An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk).
Priority MEDIUM 46
An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk).
TI-2019-09703 CVE-2019-12960 · GHSA-94cx-8qx3-6fv7
LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in…
Priority MEDIUM 45
LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc.php via the parameter p_dt_s_d.
TI-2019-09687 CVE-2019-12939 · GHSA-r457-6rfv-r45r
LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the p_ext_rse parameter.
Priority MEDIUM 45
LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the p_ext_rse parameter.
TI-2019-09704 CVE-2019-12961 · GHSA-55hw-334h-rx8x
LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function.
Priority MEDIUM 41
LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function.
TI-2019-09705 CVE-2019-12962 · GHSA-2vv4-xm6v-5wf5
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.
Priority LOW 39
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.
TI-2013-05782 CVE-2013-7034 · GHSA-ggvm-gvh9-pjgw
The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1…
Priority LOW 36
The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows remote attackers to execute arbitrary PHP code via a serialized PHP object in a cookie.
TI-2013-06049 CVE-2013-7385 · GHSA-725j-v2ph-xx6g
LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext…
Priority LOW 33
LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which allows remote attackers to obtain sensitive information and gain…
TI-2017-11616 CVE-2017-15869 · GHSA-p2x3-r39x-gcmp
Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9…
Priority LOW 30
Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inject arbitrary web script or HTML via the search-for parameter.
TI-2019-09707 CVE-2019-12964 · GHSA-q792-v8x9-mh56
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject.
Priority LOW 29
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject.
TI-2019-09706 CVE-2019-12963 · GHSA-39cr-9663-62x5
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action.
Priority LOW 29
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action.
TI-2019-09688 CVE-2019-12940 · GHSA-79c7-jh67-pjhx
LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service (memory consumption)…
Priority LOW 29
LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service (memory consumption) in knowledgebase.php via a large integer value of the depth parameter.
TI-2018-07639 CVE-2018-10810 · GHSA-m489-859f-87vc
chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site…
Priority LOW 28
chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site Scripting via the Accept-Language HTTP header.
TI-2013-05780 CVE-2013-7032 · GHSA-22mf-wg7m-839j
Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in…
Priority LOW 24
Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla before 5.1.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name of an uploaded file or (2) c…
TI-2013-05756 CVE-2013-7003 · GHSA-g8r4-h369-6h7r
Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.2.0 allow…
Priority LOW 24
Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) full name field, (2) company field, or (3) filename to chat.php.
TI-2013-05236 CVE-2013-6224 · GHSA-3hgq-hmm8-5vx3
Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow…
Priority LOW 24
Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) a name in the call administrator feature, (2) unspecified vectors to t…
TI-2010-04025 CVE-2010-4276 · GHSA-3pm4-p625-gqmh
Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in…
Priority LOW 23
Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers to inject arbitrary web script or HTML via the livezilla param…
TI-2009-04213 CVE-2009-4450 · GHSA-grw2-42pw-w79c
Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow…
Priority LOW 23
Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lat, (2) lng, and (3) zom parameters, which are not properly h…
TI-2013-05781 CVE-2013-7033 · GHSA-jvmv-fm55-2267
LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code…
Priority LOW 22
LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which might allow remote attackers to obtain sensitive information and gain privileges by a…
TI-2013-05755 CVE-2013-7002 · GHSA-qqx6-4h7m-w6xv
Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla…
Priority LOW 22
Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote attackers to inject arbitrary web script or HTML via the g_language parameter.
TI-2013-05235 CVE-2013-6223 · GHSA-7gf5-cvfr-wrvh
LiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a…
Priority LOW 12
LiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a 1click file, which allows local users to obtain access by reading the file.