Livezilla vulnerabilities

Products

• Livezilla 21

Newest

• livezilla An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk). A blind JavaScript... CVE-2020-9758 Public exploit 9.6 CriticalMarch 9, 2020
• livezilla LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability CVE-2013-6225 Public exploit EPSS 26.6% 9.8 CriticalJanuary 13, 2020
• livezilla LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject. CVE-2019-12964 6.1 MediumJune 25, 2019
• livezilla LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action. CVE-2019-12963 6.1 MediumJune 25, 2019
• livezilla LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language... CVE-2019-12962 Public exploit 6.1 MediumJune 25, 2019
• livezilla LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function. CVE-2019-12961 8.8 HighJune 25, 2019
• livezilla LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc... CVE-2019-12960 9.8 CriticalJune 25, 2019
• livezilla LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service (memory consumption) in... CVE-2019-12940 5.9 MediumJune 24, 2019
• livezilla LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the p_ext_rse... CVE-2019-12939 9.8 CriticalJune 24, 2019
• livezilla chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site... CVE-2018-10810 6.1 MediumMay 16, 2018
• livezilla Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows... CVE-2017-15869 6.1 MediumJanuary 18, 2018
• livezilla LiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a 1click file,... CVE-2013-6223 2.1 LowJune 9, 2014
• livezilla LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in... CVE-2013-7385 6.8 MediumMay 19, 2014
• livezilla LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is... CVE-2013-7033 4.3 MediumMay 19, 2014
• livezilla The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows... CVE-2013-7034 7.5 HighMay 5, 2014
• livezilla Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.2.0 allow remote... CVE-2013-7003 4.3 MediumMay 5, 2014
• livezilla Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla... CVE-2013-7032 4.3 MediumFebruary 14, 2014
• livezilla Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before... CVE-2013-7002 4.3 MediumDecember 21, 2013
• livezilla Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote... CVE-2013-6224 4.3 MediumDecember 10, 2013
• livezilla Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates... CVE-2010-4276 Public exploit 4.3 MediumDecember 30, 2010
• livezilla Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote... CVE-2009-4450 Public exploit 4.3 MediumDecember 29, 2009