CVE-2020-9758 | Critical | 9.6 | 2020-03-09 | An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk). A blind JavaScript injection lies in the name parameter. Triggering this can fet… |
CVE-2013-6225 | Critical | 9.8 | 2020-01-13 | LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability |
CVE-2019-12964 | Medium | 6.1 | 2019-06-25 | LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject. |
CVE-2019-12963 | Medium | 6.1 | 2019-06-25 | LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action. |
CVE-2019-12962 | Medium | 6.1 | 2019-06-25 | LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header. |
CVE-2019-12961 | High | 8.8 | 2019-06-25 | LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function. |
CVE-2019-12960 | Critical | 9.8 | 2019-06-25 | LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc.php via the parameter p_dt_s_d. |
CVE-2019-12940 | Medium | 5.9 | 2019-06-24 | LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service (memory consumption) in knowledgebase.php via a large integer value of the depth parameter. |
CVE-2019-12939 | Critical | 9.8 | 2019-06-24 | LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the p_ext_rse parameter. |
CVE-2018-10810 | Medium | 6.1 | 2018-05-16 | chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site Scripting via the Accept-Language HTTP header. |
CVE-2017-15869 | Medium | 6.1 | 2018-01-18 | Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inject arbitrary web script or HTML via th… |
CVE-2013-6223 | | | 2014-06-09 | LiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a 1click file, which allows local users to obtain access by reading the file. |
CVE-2013-7385 | | | 2014-05-19 | LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which all… |
CVE-2013-7033 | | | 2014-05-19 | LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which might allow remote attac… |
CVE-2013-7034 | | | 2014-05-05 | The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows remote attackers to execute arbitrary PHP code via a serialized… |
CVE-2013-7003 | | | 2014-05-05 | Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) full… |
CVE-2013-7032 | | | 2014-02-14 | Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla before 5.1.2.1 allow remote attackers to inject arbitrary web… |
CVE-2013-7002 | | | 2013-12-21 | Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote attackers to inject arbitrary web script… |
CVE-2013-6224 | | | 2013-12-10 | Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) a name in… |
CVE-2010-4276 | | | 2010-12-30 | Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers t… |
CVE-2009-4450 | | | 2009-12-29 | Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) l… |