livehelperchat kayıtları
livehelperchat üreticisine ait 42 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %45,2
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')25
- CWE-352 Cross-Site Request Forgery (CSRF)6
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-209 Generation of Error Message Containing Sensitive Information2
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-639 Authorization Bypass Through User-Controlled Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
42 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-27516İstismar yok | Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and oblivehelperchat · live helper chat · CWE-78 | Kritik9,8 | — | %1,4 | 28 Şub 2024 |
35İzleyin | CVE-2022-0935İstismar yok | Host Header injection in password Reset in livehelperchat/livehelperchatlivehelperchat · live helper chat · CWE-840 | Yüksek8,8 | — | %1,3 | 7 Nis 2022 |
35İzleyin | CVE-2021-4131İstismar yok | Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatlivehelperchat · live helper chat · CWE-352 | Yüksek8,8 | — | %0,5 | 18 Ara 2021 |
32İzleyin | CVE-2022-1191İstismar yok | SSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchatlivehelperchat · live helper chat · CWE-918 | Yüksek8,1 | — | %0,9 | 31 Mar 2022 |
32İzleyin | CVE-2022-1213İstismar yok | SSRF filter bypass port 80, 433 in livehelperchat/livehelperchatlivehelperchat · live helper chat · CWE-918 | Yüksek8,1 | — | %0,5 | 5 Nis 2022 |
32İzleyin | CVE-2022-1235İstismar yok | Weak secrethash can be brute-forced in livehelperchat/livehelperchatlivehelperchat · live helper chat · CWE-916 | Yüksek8,2 | — | %0,5 | 5 Nis 2022 |
30İzleyin | CVE-2022-1176İstismar yok | Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchatlivehelperchat · live helper chat · CWE-843 | Yüksek7,5 | — | %1,2 | 31 Mar 2022 |
26İzleyin | CVE-2025-51403Kavram kanıtı | A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers livehelperchat · live helper chat · CWE-79 | Orta6,5 | — | %1,5 | 21 Tem 2025 |
26İzleyin | CVE-2022-0266İstismar yok | Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchatlivehelperchat · live helper chat · CWE-639 | Orta6,6 | — | %1,0 | 19 Oca 2022 |
26İzleyin | CVE-2022-0231İstismar yok | Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatlivehelperchat · live helper chat · CWE-352 | Orta6,5 | — | %0,5 | 14 Oca 2022 |
26İzleyin | CVE-2021-4123İstismar yok | Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatlivehelperchat · live helper chat · CWE-352 | Orta6,5 | — | %0,5 | 16 Ara 2021 |
26İzleyin | CVE-2021-4049İstismar yok | Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchatlivehelperchat · live helper chat · CWE-352 | Orta6,5 | — | %0,4 | 7 Ara 2021 |
24İzleyin | CVE-2017-1000059İstismar yok | Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of anylivehelperchat · live helper chat · CWE-79 | Orta6,1 | — | %1,1 | 17 Tem 2017 |
24İzleyin | CVE-2020-26134İstismar yok | Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode.livehelperchat · live helper chat · CWE-79 | Orta6,1 | — | %1,0 | 2 Eki 2020 |
24İzleyin | CVE-2020-26135İstismar yok | Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.livehelperchat · live helper chat · CWE-79 | Orta6,1 | — | %1,0 | 2 Eki 2020 |
24İzleyin | CVE-2021-4169Kavram kanıtı | Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchatlivehelperchat · live helper chat · CWE-79 | Orta6,1 | — | %0,9 | 26 Ara 2021 |
24İzleyin | CVE-2021-4050İstismar yok | Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchatlivehelperchat · live helper chat · CWE-79 | Orta6,1 | — | %0,8 | 8 Ara 2021 |
24İzleyin | CVE-2021-4176İstismar yok | Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchatlivehelperchat · live helper chat · CWE-79 | Orta6,1 | — | %0,7 | 29 Ara 2021 |
24İzleyin | CVE-2022-1234İstismar yok | XSS in livehelperchat in livehelperchat/livehelperchatlivehelperchat · live helper chat · CWE-79 | Orta6,1 | — | %0,7 | 6 Nis 2022 |
24İzleyin | CVE-2022-1530İstismar yok | Cross-site Scripting (XSS) in livehelperchat/livehelperchatlivehelperchat · live helper chat · CWE-79 | Orta6,1 | — | %0,6 | 29 Nis 2022 |
21İzleyin | CVE-2025-51396Kavram kanıtı | A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via inlivehelperchat · live helper chat · CWE-79 | Orta5,4 | — | %0,9 | 21 Tem 2025 |
21İzleyin | CVE-2025-51397Kavram kanıtı | A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrarlivehelperchat · live helper chat · CWE-779 | Orta5,4 | — | %0,9 | 21 Tem 2025 |
21İzleyin | CVE-2025-51401Kavram kanıtı | A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitrlivehelperchat · live helper chat · CWE-79 | Orta5,4 | — | %0,9 | 21 Tem 2025 |
21İzleyin | CVE-2025-51398Kavram kanıtı | A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows attackers to execute arlivehelperchat · live helper chat · CWE-79 | Orta5,4 | — | %0,9 | 21 Tem 2025 |
21İzleyin | CVE-2025-51400Kavram kanıtı | A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows attackers to execute arbilivehelperchat · live helper chat · CWE-79 | Orta5,4 | — | %0,9 | 21 Tem 2025 |
- CVE-2024-2751639İzleyin
Server-Side Template Injection (SSTI) vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and ob
KritikCVSS 9,8İstismar yokEPSS %1livehelperchat · live helper chat28 Şub 2024
- CVE-2022-093535İzleyin
Host Header injection in password Reset in livehelperchat/livehelperchat
YüksekCVSS 8,8İstismar yokEPSS %1livehelperchat · live helper chat7 Nis 2022
- CVE-2021-413135İzleyin
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
YüksekCVSS 8,8İstismar yokEPSS %0livehelperchat · live helper chat18 Ara 2021
- CVE-2022-119132İzleyin
SSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchat
YüksekCVSS 8,1İstismar yokEPSS %0livehelperchat · live helper chat31 Mar 2022
- CVE-2022-121332İzleyin
SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat
YüksekCVSS 8,1İstismar yokEPSS %0livehelperchat · live helper chat5 Nis 2022
- CVE-2022-123532İzleyin
Weak secrethash can be brute-forced in livehelperchat/livehelperchat
YüksekCVSS 8,2İstismar yokEPSS %0livehelperchat · live helper chat5 Nis 2022
- CVE-2022-117630İzleyin
Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat
YüksekCVSS 7,5İstismar yokEPSS %1livehelperchat · live helper chat31 Mar 2022
- CVE-2025-5140326İzleyin
A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers
OrtaCVSS 6,5Kavram kanıtıEPSS %1livehelperchat · live helper chat21 Tem 2025
- CVE-2022-026626İzleyin
Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat
OrtaCVSS 6,6İstismar yokEPSS %1livehelperchat · live helper chat19 Oca 2022
- CVE-2022-023126İzleyin
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
OrtaCVSS 6,5İstismar yokEPSS %0livehelperchat · live helper chat14 Oca 2022
- CVE-2021-412326İzleyin
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
OrtaCVSS 6,5İstismar yokEPSS %0livehelperchat · live helper chat16 Ara 2021
- CVE-2021-404926İzleyin
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
OrtaCVSS 6,5İstismar yokEPSS %0livehelperchat · live helper chat7 Ara 2021
- CVE-2017-100005924İzleyin
Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any
OrtaCVSS 6,1İstismar yokEPSS %1livehelperchat · live helper chat17 Tem 2017
- CVE-2020-2613424İzleyin
Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode.
OrtaCVSS 6,1İstismar yokEPSS %1livehelperchat · live helper chat2 Eki 2020
- CVE-2020-2613524İzleyin
Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.
OrtaCVSS 6,1İstismar yokEPSS %1livehelperchat · live helper chat2 Eki 2020
- CVE-2021-416924İzleyin
Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat
OrtaCVSS 6,1Kavram kanıtıEPSS %0livehelperchat · live helper chat26 Ara 2021
- CVE-2021-405024İzleyin
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
OrtaCVSS 6,1İstismar yokEPSS %0livehelperchat · live helper chat8 Ara 2021
- CVE-2021-417624İzleyin
Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat
OrtaCVSS 6,1İstismar yokEPSS %0livehelperchat · live helper chat29 Ara 2021
- CVE-2022-123424İzleyin
XSS in livehelperchat in livehelperchat/livehelperchat
OrtaCVSS 6,1İstismar yokEPSS %0livehelperchat · live helper chat6 Nis 2022
- CVE-2022-153024İzleyin
Cross-site Scripting (XSS) in livehelperchat/livehelperchat
OrtaCVSS 6,1İstismar yokEPSS %0livehelperchat · live helper chat29 Nis 2022
- CVE-2025-5139621İzleyin
A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via in
OrtaCVSS 5,4Kavram kanıtıEPSS %0livehelperchat · live helper chat21 Tem 2025
- CVE-2025-5139721İzleyin
A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrar
OrtaCVSS 5,4Kavram kanıtıEPSS %0livehelperchat · live helper chat21 Tem 2025
- CVE-2025-5140121İzleyin
A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live Helper Chat v4.60 allows attackers to execute arbitr
OrtaCVSS 5,4Kavram kanıtıEPSS %0livehelperchat · live helper chat21 Tem 2025
- CVE-2025-5139821İzleyin
A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Live Helper Chat v4.60 allows attackers to execute ar
OrtaCVSS 5,4Kavram kanıtıEPSS %0livehelperchat · live helper chat21 Tem 2025
- CVE-2025-5140021İzleyin
A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live Helper Chat v4.60 allows attackers to execute arbi
OrtaCVSS 5,4Kavram kanıtıEPSS %0livehelperchat · live helper chat21 Tem 2025