İçeriğe atla
Noroxi

livezilla kayıtları

livezilla üreticisine ait 21 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

21 kayıt
  • CVE-2013-6225
    47Planlayın

    LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %27

    livezilla · livezilla13 Oca 2020

  • CVE-2020-9758
    39İzleyin

    An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk).

    KritikCVSS 9,6Kavram kanıtıEPSS %2

    livezilla · livezilla9 Mar 2020

  • CVE-2019-12960
    39İzleyin

    LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc.php via the parameter p_dt_s_d.

    KritikCVSS 9,8İstismar yokEPSS %1

    livezilla · livezilla25 Haz 2019

  • CVE-2019-12939
    39İzleyin

    LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the p_ext_rse parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    livezilla · livezilla24 Haz 2019

  • CVE-2019-12961
    35İzleyin

    LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function.

    YüksekCVSS 8,8İstismar yokEPSS %1

    livezilla · livezilla25 Haz 2019

  • CVE-2013-7034
    30İzleyin

    The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows remote attackers to execute arbitrary PHP co

    YüksekCVSS 7,5İstismar yokEPSS %2

    livezilla · livezilla5 May 2014

  • CVE-2019-12962
    27İzleyin

    LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.

    OrtaCVSS 6,1Kavram kanıtıEPSS %9

    livezilla · livezilla25 Haz 2019

  • CVE-2013-7385
    27İzleyin

    LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/

    OrtaCVSS 6,8İstismar yokEPSS %1

    livezilla · livezilla19 May 2014

  • CVE-2017-15869
    24İzleyin

    Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inject arbitrary web sc

    OrtaCVSS 6,1İstismar yokEPSS %1

    livezilla · livezilla18 Oca 2018

  • CVE-2019-12963
    24İzleyin

    LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action.

    OrtaCVSS 6,1İstismar yokEPSS %1

    livezilla · livezilla25 Haz 2019

  • CVE-2019-12964
    24İzleyin

    LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject.

    OrtaCVSS 6,1İstismar yokEPSS %1

    livezilla · livezilla25 Haz 2019

  • CVE-2018-10810
    24İzleyin

    chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site Scripting via the Accept-Language HTTP header.

    OrtaCVSS 6,1İstismar yokEPSS %1

    livezilla · livezilla16 May 2018

  • CVE-2019-12940
    23İzleyin

    LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service (memory consumption) in knowledgebase.php via a large integer value of th

    OrtaCVSS 5,9İstismar yokEPSS %1

    livezilla · livezilla24 Haz 2019

  • CVE-2013-6224
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitrary web script or HTM

    OrtaCVSS 4,3İstismar yokEPSS %2

    livezilla · livezilla10 Ara 2013

  • CVE-2013-7003
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.2.0 allow remote attackers to inject arbitrary web script or HTM

    OrtaCVSS 4,3İstismar yokEPSS %2

    livezilla · livezilla5 May 2014

  • CVE-2013-7032
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla before 5.1.2.1 allow remote attackers to i

    OrtaCVSS 4,3İstismar yokEPSS %2

    livezilla · livezilla14 Şub 2014

  • CVE-2010-4276
    18İzleyin

    Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    livezilla · livezilla30 Ara 2010

  • CVE-2009-4450
    17İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    livezilla · livezilla29 Ara 2009

  • CVE-2013-7002
    17İzleyin

    Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote attackers to inject a

    OrtaCVSS 4,3İstismar yokEPSS %1

    livezilla · livezilla20 Ara 2013

  • CVE-2013-7033
    17İzleyin

    LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which might

    OrtaCVSS 4,3İstismar yokEPSS %1

    livezilla · livezilla19 May 2014

  • CVE-2013-6223
    8İzleyin

    LiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a 1click file, which allows local users to obtain access b

    DüşükCVSS 2,1İstismar yokEPSS %0

    livezilla · livezilla9 Haz 2014