599 matches found
Kayako Fusion 4.51.1891 Cross Site Scripting
Title: ====== Kayako Fusion v4.51.1891 - Multiple Web Vulnerabilities Date: ===== 2013-01-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=824 ID: SWIFT-3119 URL: http://dev.kayako.com/browse/SWIFT-3119 VL-ID: ===== 824 Common Vulnerability Scoring System:...
Cross site scripting
Cross-site scripting XSS vulnerability in clickdesk.php in ClickDesk Live Support - Live Chat plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cdwidgetid parameter. NOTE: some of these details are obtained from third party information...
CVE-2011-5181
Cross-site scripting XSS vulnerability in clickdesk.php in ClickDesk Live Support - Live Chat plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cdwidgetid parameter. NOTE: some of these details are obtained from third party information...
PT-2012-2158
Name of the Vulnerable Software and Affected Versions ClickDesk Live Support - Live Chat plugin version 2.0 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the cdwidgetid parameter in the clickdesk.php file. This could potentially lead t...
CVE-2011-5181: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in clickdesk.php in ClickDesk Live Support - Live Chat plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cdwidgetid parameter. NOTE: some of these details are obtained from third party information...
Velaro Live Chat HTML Injection
Exploit Title: Velaro Live Chat Software Cross Site Scripting Date: 29.08.2011 Author: Sony Software Link: http://www.velaro.com/features/live-chat Version: all version POC: http://st2tea.blogspot.com/2011/08/velaro-live-chat-software-cross-site.html...
Rogue AV Live Tech Support
This is a recording of a live chat session with the technical support agent associated with a rogue AV program. The session was recorded by Nicolas Brulez, a security analyst at Kaspersky Lab.The video is best viewed in full-screen mode...
Pulling Back the Curtain on Rogue AV Tech Support
We’ve blogged a few times about rogue AV, explaining how search engines have been abused using Black Hat Search Engine Optimization techniques to redirect web surfers to rogue AV websites. Recently, we’ve noticed that the rogue AVs being spread are all equipped with an “Online Support” button. Se...
LiveZilla 3.1.8.3 - Cross-Site Scripting
Info: LiveZilla, the Next Generation Live Help / Live Chat and Live Support System connects you to your website visitors. Use LiveZilla to provide Live Chats and monitor your website visitors in real-time. Convert visitors to customers - with LiveZilla! Credits: InterN0T External Links:...
LiveZilla 3.1.8.3 - Cross-Site Scripting
LiveZilla 3.1.8.3 - Cross-Site Scripting Info: LiveZilla, the Next Generation Live Help / Live Chat and Live Support System connects you to your website visitors. Use LiveZilla to provide Live Chats and monitor your website visitors in real-time. Convert visitors to customers - with LiveZilla!...
PHP Live! 3.3 SQL Injection
, . | | o | | |,---.,---., .,---.,---.,---.,---.,---|,---.,---.| .,---.|/ ---'| || || |,---|| ,---|| | ||---'| | || || \ | ---'---|---|---^---'---^ ---'---' ---' ' ---'---' o PHP Live! 3.3 deptid Remote SQL Injection --== Author ==-- + Author : v3n0m + Contact : v3n0m666atlivedotcom + Blog :...
PHP Live! 3.3 (deptid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= PHP Live! 3.3 deptid Remote SQL Injection Vulnerability ========================================================= , . | | o | | |,---.,---., .,---.,---.,---.,---.,---|,---.,---.|...
PHP Live! 3.3 - deptid SQL Injection
PHP Live! 3.3 - deptid SQL Injection , . | | o | | |,---.,---., .,---.,---.,---.,---.,---|,---.,---.| .,---.|/ ---'| || || |,---|| ,---|| | ||---'| | || || \ | ---'---|---|---^---'---^ ---'---' ---' ' ---'---' o PHP Live! 3.3 deptid Remote SQL Injection --== Author ==-- + Author : v3n0m + Contact...
Sql injection
SQL injection vulnerability in the Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the last parameter to getChatRoom.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-6883
SQL injection vulnerability in the Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the last parameter to getChatRoom.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Sql injection
Multiple SQL injection vulnerabilities in the Live Chat comlivechat component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the last parameter to 1 getChat.php, 2 getChatRoom.php, and 3 getSavedChatRooms.php...
Open redirect
Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string...
CVE-2008-6881
Multiple SQL injection vulnerabilities in the Live Chat comlivechat component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the last parameter to 1 getChat.php, 2 getChatRoom.php, and 3 getSavedChatRooms.php...
CVE-2008-6882
Live Chat comlivechat component 1.0 for Joomla! allows remote attackers to use the xmlhttp.php script as an open HTTP proxy to hide network scanning activities or scan internal networks via a GET request with a full URL in the query string...
CVE-2008-6883
The CVE-2008-6883 entry corresponds to an SQL injection vulnerability in the Joomla! Live Chat (com_livechat) component 1.0. The flaw is exploitable remotely via the last parameter to getChatRoom.php, enabling arbitrary SQL execution. Connected sources describe multiple SQLi vectors affecting get...