Approved changes feed: RSS · Atom
cpe:2.3:a:livezilla:livezilla:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Livezilla (68148d54-33e3-5ca0-b517-36bd3732ac0f) |
|---|---|
| Product | Livezilla (3000bd31-fb3f-50ac-9723-84a3b769acc1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-9758 |
vulnerable | 2026-06-08 05:28:02.759938 |
Details available
An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk). A blind JavaScript injection lies in the name parameter. Triggering this can fetch the username and passwords of the helpdesk employees in the URI. This leads to a privilege escalation, from unauthenticated to user-level access, leading to full account takeover. The attack fetches multiple credentials because they are stored in the database (stored XSS). This affects the mobile/chat URI via the lgn and psswrd parameters.
Published: 2020-03-09T18:27:20.000Z
Updated: 2024-08-04T10:43:04.410Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12964 |
vulnerable | 2026-06-08 05:12:40.725280 |
Details available
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject.
Published: 2019-06-25T12:56:01.000Z
Updated: 2024-08-04T23:32:55.641Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12963 |
vulnerable | 2026-06-08 05:12:40.724999 |
Details available
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action.
Published: 2019-06-25T12:55:52.000Z
Updated: 2024-08-04T23:32:55.595Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12962 |
vulnerable | 2026-06-08 05:12:40.724718 |
Details available
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.
Published: 2019-06-25T12:55:43.000Z
Updated: 2024-08-04T23:32:55.588Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12961 |
vulnerable | 2026-06-08 05:12:40.724414 |
Details available
LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function.
Published: 2019-06-25T12:55:28.000Z
Updated: 2024-08-04T23:32:55.643Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12960 |
vulnerable | 2026-06-08 05:12:40.724098 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12940 |
vulnerable | 2026-06-08 05:12:40.669104 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12939 |
vulnerable | 2026-06-08 05:12:40.668708 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10810 |
vulnerable | 2026-06-08 05:10:37.116841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15869 |
vulnerable | 2026-06-08 05:08:59.635825 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7385 |
vulnerable | 2026-06-08 05:05:10.205464 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7034 |
vulnerable | 2026-06-08 05:05:08.106606 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7033 |
vulnerable | 2026-06-08 05:05:08.106084 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7032 |
vulnerable | 2026-06-08 05:05:08.102902 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7003 |
vulnerable | 2026-06-08 05:05:07.700782 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7002 |
vulnerable | 2026-06-08 05:05:07.692520 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6224 |
vulnerable | 2026-06-08 05:04:55.681524 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6223 |
vulnerable | 2026-06-08 05:04:55.671021 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.