CVE Browser

TodayOct 8th 3 Last 7 days 2,749 CISA KEV 1,734 Critical 42,690 All stats

Page 1

CVE-2020-9758 CRITICAL

An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk). A blind JavaScript injection lies in the name parameter. Triggering this can fet…

CVSS 9.6 EPSS 2.46% Mar 9, 2020

CVE-2013-6225 CRITICAL

LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability

CVSS 9.8 EPSS 26.57% Jan 13, 2020

CVE-2019-12964 MEDIUM

LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject.

CVSS 6.1 EPSS 0.82% Jun 25, 2019

CVE-2019-12963 MEDIUM

LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action.

CVSS 6.1 EPSS 0.82% Jun 25, 2019

CVE-2019-12962 MEDIUM

LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.

CVSS 6.1 EPSS 9.05% Jun 25, 2019

CVE-2019-12961 HIGH

LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function.

CVSS 8.8 EPSS 1.39% Jun 25, 2019

CVE-2019-12960 CRITICAL

LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc.php via the parameter p_dt_s_d.

CVSS 9.8 EPSS 1.44% Jun 25, 2019

CVE-2019-12940 MEDIUM

LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service (memory consumption) in knowledgebase.php via a large integer value of the depth parameter.

CVSS 5.9 EPSS 1.10% Jun 24, 2019

CVE-2019-12939 CRITICAL

LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the p_ext_rse parameter.

CVSS 9.8 EPSS 1.36% Jun 24, 2019

CVE-2018-10810 MEDIUM

chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site Scripting via the Accept-Language HTTP header.

CVSS 6.1 EPSS 0.62% May 16, 2018

CVE-2017-15869 MEDIUM

Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inject arbitrary web script or HTML via th…

CVSS 6.1 EPSS 1.34% Jan 18, 2018

CVE-2013-6223 LOW

LiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a 1click file, which allows local users to obtain access by reading the file.

CVSS 2.1 EPSS 0.48% Jun 9, 2014

CVE-2013-7385 MEDIUM

LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which all…

CVSS 6.8 EPSS 1.27% May 19, 2014

CVE-2013-7033 MEDIUM

LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which might allow remote attac…

CVSS 4.3 EPSS 1.16% May 19, 2014

CVE-2013-7034 HIGH

The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows remote attackers to execute arbitrary PHP code via a serialized…

CVSS 7.5 EPSS 1.58% May 5, 2014

CVE-2013-7003 MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) full…

CVSS 4.3 EPSS 1.85% May 5, 2014

CVE-2013-7032 MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla before 5.1.2.1 allow remote attackers to inject arbitrary web…

CVSS 4.3 EPSS 1.79% Feb 14, 2014

CVE-2013-7002 MEDIUM

Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote attackers to inject arbitrary web script…

CVSS 4.3 EPSS 1.21% Dec 21, 2013

CVE-2013-6224 MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) a name in…

CVSS 4.3 EPSS 2.16% Dec 10, 2013

CVE-2010-4276 MEDIUM

Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers t…

CVSS 4.3 EPSS 1.69% Dec 30, 2010

CVE-2009-4450 MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) l…

CVSS 4.3 EPSS 1.47% Dec 29, 2009

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2020-9758	An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk). A blind JavaScript injection lies in the name parameter. Triggering this can fet…	CRITICAL	9.6	2.46%	Mar 9, 2020
CVE-2013-6225	LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability	CRITICAL	9.8	26.57%	Jan 13, 2020
CVE-2019-12964	LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject.	MEDIUM	6.1	0.82%	Jun 25, 2019
CVE-2019-12963	LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action.	MEDIUM	6.1	0.82%	Jun 25, 2019
CVE-2019-12962	LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.	MEDIUM	6.1	9.05%	Jun 25, 2019
CVE-2019-12961	LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function.	HIGH	8.8	1.39%	Jun 25, 2019
CVE-2019-12960	LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc.php via the parameter p_dt_s_d.	CRITICAL	9.8	1.44%	Jun 25, 2019
CVE-2019-12940	LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service (memory consumption) in knowledgebase.php via a large integer value of the depth parameter.	MEDIUM	5.9	1.10%	Jun 24, 2019
CVE-2019-12939	LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the p_ext_rse parameter.	CRITICAL	9.8	1.36%	Jun 24, 2019
CVE-2018-10810	chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site Scripting via the Accept-Language HTTP header.	MEDIUM	6.1	0.62%	May 16, 2018
CVE-2017-15869	Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inject arbitrary web script or HTML via th…	MEDIUM	6.1	1.34%	Jan 18, 2018
CVE-2013-6223	LiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a 1click file, which allows local users to obtain access by reading the file.	LOW	2.1	0.48%	Jun 9, 2014
CVE-2013-7385	LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which all…	MEDIUM	6.8	1.27%	May 19, 2014
CVE-2013-7033	LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which might allow remote attac…	MEDIUM	4.3	1.16%	May 19, 2014
CVE-2013-7034	The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows remote attackers to execute arbitrary PHP code via a serialized…	HIGH	7.5	1.58%	May 5, 2014
CVE-2013-7003	Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) full…	MEDIUM	4.3	1.85%	May 5, 2014
CVE-2013-7032	Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla before 5.1.2.1 allow remote attackers to inject arbitrary web…	MEDIUM	4.3	1.79%	Feb 14, 2014
CVE-2013-7002	Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote attackers to inject arbitrary web script…	MEDIUM	4.3	1.21%	Dec 21, 2013
CVE-2013-6224	Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) a name in…	MEDIUM	4.3	2.16%	Dec 10, 2013
CVE-2010-4276	Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers t…	MEDIUM	4.3	1.69%	Dec 30, 2010
CVE-2009-4450	Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) l…	MEDIUM	4.3	1.47%	Dec 29, 2009

Rows per page

Showing 1 to 21 CVEs · page 1