74 matches found
CVE-2020-9758
CVE-2020-9758 الوصف تم اكتشاف مشكلة في chat.php في LiveZilla Live Chat 8.0.1.3 Helpdesk. يكمن حقن JavaScript أعمى في معامل name. يمكن أن يؤدي تشغيل هذا إلى جلب اسم المستخدم وكلمات المرور لموظفي مكتب المساعدة في URI. يؤدي هذا إلى تصعيد الامتيازات، من وصول غير مصادق إلى وصول على مستوى المستخدم، مما...
PT-2026-75937
Summary An authenticated SQL LIKE wildcard injection vulnerability in phpMyFAQ’s chat user search allows any logged-in user to bypass the intended display-name search filter and enumerate active users. The endpoint escapes SQL string syntax but does not escape % and , which remain active LIKE...
EUVD-2019-4538
Malware in sbrugna...
EUVD-2018-13276
Malware in sbrugna...
CVE-2025-9651
CVE-2025-9651 affects shafhasan chatbox; the vulnerable component is the /chat.php file where manipulating the user_id parameter triggers a SQL injection. The vulnerability is exploitable remotely (attack vector NETWORK) with low privileges required and no user interaction. Documented impact incl...
Chatbox 安全漏洞
Chatbox is a chat software by the individual developer Shafqat Hasan. Chatbox has a security vulnerability that stems from SQL injection due to incorrect manipulation of the parameter userid in the file /chat.php...
CVE-2025-9651: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in shafhasan chatbox up to 156a39cde62f78532c3265a70eda12c70907e56f. This impacts an unknown function of the file /chat.php. The manipulation of the argument userid results in sql injection. The attack may be performed from a remote location. The exploit has been made...
CVE-2024-10809
A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. This issue affects some unknown processing of the file /Doctor/chat.php. The manipulation of the argument name/message leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-10809: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. This issue affects some unknown processing of the file /Doctor/chat.php. The manipulation of the argument name/message leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-2284 boyiddha Automated-Mess-Management-System Chat Book chat.php cross site scripting
A vulnerability classified as problematic was found in boyiddha Automated-Mess-Management-System 1.0. Affected by this vulnerability is an unknown functionality of the file /member/chat.php of the component Chat Book. The manipulation of the argument msg leads to cross site scripting. The attack...
CVE-2023-4447
A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. This vulnerability affects unknown code of the file admin/article-chat.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to th...
CVE-2023-4447
A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. This vulnerability affects unknown code of the file admin/article-chat.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to th...
CVE-2023-4447 OpenRapid RapidCMS article-chat.php sql injection
A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. This vulnerability affects unknown code of the file admin/article-chat.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to th...
CVE-2023-4447: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. This vulnerability affects unknown code of the file admin/article-chat.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to th...
CVE-2020-9758
An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 Helpdesk. A blind JavaScript injection lies in the name parameter. Triggering this can fetch the username and passwords of the helpdesk employees in the URI. This leads to a privilege escalation, from unauthenticated to user-level...
PT-2020-20740
Name of the Vulnerable Software and Affected Versions LiveZilla Live Chat version 8.0.1.3 Description A blind JavaScript injection issue exists in the name parameter of the chat.php file. This can lead to a privilege escalation from unauthenticated to user-level access, resulting in full account...
CVE-2020-9758: Improper Neutralization of Input During Web Page Generation
An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 Helpdesk. A blind JavaScript injection lies in the name parameter. Triggering this can fetch the username and passwords of the helpdesk employees in the URI. This leads to a privilege escalation, from unauthenticated to user-level...
Exploit for Cross-site Scripting in Livezilla
CVE-2020-9758 Description An issue was discovered in cha...
