Vulnerabilities

TI-2020-07843 CVE-2020-9758 · GHSA-m978-hcqw-jcmw

An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk).

MEDIUM 46

An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk).

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02485 Published 2020-03-09 No fix listed CWE-79

TI-2013-05237 CVE-2013-6225 · GHSA-2x9w-m9r8-rmvq

LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability

MEDIUM 64

LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.26567 Published 2020-01-13 No fix listed CWE-22

TI-2019-09707 CVE-2019-12964 · GHSA-q792-v8x9-mh56

LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject.

LOW 29

LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00817 Published 2019-06-25 No fix listed CWE-79

TI-2019-09706 CVE-2019-12963 · GHSA-39cr-9663-62x5

LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action.

LOW 29

LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00817 Published 2019-06-25 No fix listed CWE-79

TI-2019-09705 CVE-2019-12962 · GHSA-2vv4-xm6v-5wf5

LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.

LOW 39

LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.09052 Published 2019-06-25 No fix listed CWE-79

TI-2019-09704 CVE-2019-12961 · GHSA-55hw-334h-rx8x

LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function.

MEDIUM 41

LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01389 Published 2019-06-25 No fix listed CWE-1236

TI-2019-09703 CVE-2019-12960 · GHSA-94cx-8qx3-6fv7

LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in…

MEDIUM 45

LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc.php via the parameter p_dt_s_d.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01435 Published 2019-06-25 No fix listed CWE-89

TI-2019-09688 CVE-2019-12940 · GHSA-79c7-jh67-pjhx

LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service (memory consumption)…

LOW 29

LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service (memory consumption) in knowledgebase.php via a large integer value of the depth parameter.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01103 Published 2019-06-24 No fix listed CWE-770

TI-2019-09687 CVE-2019-12939 · GHSA-r457-6rfv-r45r

LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the p_ext_rse parameter.

MEDIUM 45

LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the p_ext_rse parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01359 Published 2019-06-24 No fix listed CWE-89

TI-2018-07639 CVE-2018-10810 · GHSA-m489-859f-87vc

chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site…

LOW 28

chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site Scripting via the Accept-Language HTTP header.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00605 Published 2018-05-16 No fix listed CWE-79

TI-2017-11616 CVE-2017-15869 · GHSA-p2x3-r39x-gcmp

Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9…

LOW 30

Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inject arbitrary web script or HTML via the search-for parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01341 Published 2018-01-18 No fix listed CWE-79

TI-2013-05235 CVE-2013-6223 · GHSA-7gf5-cvfr-wrvh

LiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a…

LOW 12

LiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a 1click file, which allows local users to obtain access by reading the file.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00482 Published 2014-06-09 No fix listed CWE-255

TI-2013-06049 CVE-2013-7385 · GHSA-725j-v2ph-xx6g

LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext…

LOW 33

LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which allows remote attackers to obtain sensitive information and gain…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01268 Published 2014-05-19 No fix listed CWE-310

TI-2013-05781 CVE-2013-7033 · GHSA-jvmv-fm55-2267

LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code…

LOW 22

LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which might allow remote attackers to obtain sensitive information and gain privileges by a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01159 Published 2014-05-19 No fix listed CWE-310

TI-2013-05782 CVE-2013-7034 · GHSA-ggvm-gvh9-pjgw

The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1…

LOW 36

The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows remote attackers to execute arbitrary PHP code via a serialized PHP object in a cookie.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01583 Published 2014-05-05 No fix listed CWE-94

TI-2013-05756 CVE-2013-7003 · GHSA-g8r4-h369-6h7r

Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.2.0 allow…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) full name field, (2) company field, or (3) filename to chat.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01854 Published 2014-05-05 No fix listed CWE-79

TI-2013-05780 CVE-2013-7032 · GHSA-22mf-wg7m-839j

Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla before 5.1.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name of an uploaded file or (2) c…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01792 Published 2014-02-14 No fix listed CWE-79

TI-2013-05755 CVE-2013-7002 · GHSA-qqx6-4h7m-w6xv

Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla…

LOW 22

Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote attackers to inject arbitrary web script or HTML via the g_language parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01208 Published 2013-12-21 No fix listed CWE-79

TI-2013-05236 CVE-2013-6224 · GHSA-3hgq-hmm8-5vx3

Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) a name in the call administrator feature, (2) unspecified vectors to t…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02156 Published 2013-12-10 No fix listed CWE-79

TI-2010-04025 CVE-2010-4276 · GHSA-3pm4-p625-gqmh

Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in…

LOW 23

Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers to inject arbitrary web script or HTML via the livezilla param…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01655 Published 2010-12-30 No fix listed CWE-79

TI-2009-04213 CVE-2009-4450 · GHSA-grw2-42pw-w79c

Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lat, (2) lng, and (3) zom parameters, which are not properly h…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01465 Published 2009-12-29 No fix listed CWE-79

Vulnerabilities

Filters