Sql injection

livehelperchat 4.28v is vulnerable to Server-Side Template Injection SSTI...

PT-2024-21926 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat versions prior to 4.34 Description: A Server-Side Template Injection SSTI issue allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhc web/modules/lhfaq/faqweight.php...

CVE-2024-27516: Improper Neutralization of Special Elements used in an OS Command

Server-Side Template Injection SSTI vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhcweb/modules/lhfaq/faqweight.php...

CVE-2024-27516

Server-Side Template Injection SSTI vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhcweb/modules/lhfaq/faqweight.php...

CVE-2024-27516

Server-Side Template Injection SSTI vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhcweb/modules/lhfaq/faqweight.php...

CVE-2024-27516

Server-Side Template Injection SSTI vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhcweb/modules/lhfaq/faqweight.php...

CVE-2024-27516

A Server-Side Template Injection (SSTI) vulnerability exists in livehelperchat versions prior to 4.34 . Remote attackers can exploit the search parameter in the lhc_web/modules/lhfaq/faqweight.php file to execute arbitrary code and obtain sensitive information. To remediate this issue, users shou...

livehelperchat cross-site scripting vulnerability (CNVD-2023-86325)

livehelperchat is an open source application that provides free live support on a website through live helper chat. A cross-site scripting XSS vulnerability exists in livehelperchat versions prior to 3.99, which can be exploited by an attacker to execute malicious JS scripts on the application...

CVE-2022-1530

Cross-site Scripting XSS in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application...

CVE-2022-1530

Cross-site Scripting XSS in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application...

Cross site scripting

Cross-site Scripting XSS in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application...

CVE-2022-1530 Cross-site Scripting (XSS) in livehelperchat/livehelperchat

Cross-site Scripting XSS in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application...

CVE-2022-1530 Cross-site Scripting (XSS) in livehelperchat/livehelperchat

Cross-site Scripting XSS in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application...

CVE-2022-1530

CVE-2022-1530 corresponds to a Cross-site Scripting (XSS) vulnerability in livehelperchat/livehelperchat (GitHub repository) prior to version 3.99. The issue allows an attacker to execute malicious JavaScript within the application. Available sources indicate the vulnerability affects versions be...

PT-2022-13933 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat/livehelperchat versions prior to 3.99v Description: The issue is related to Cross-site Scripting XSS, which allows an attacker to execute malicious JavaScript on the application. This can potentially lead to unauthorized action...

CVE-2022-1530: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application...

livehelperchat 跨站脚本漏洞

livehelperchat is an open source application that provides free live support on a website through live helper chat. A cross-site scripting XSS vulnerability exists in livehelperchat versions prior to 3.99, which can be exploited by an attacker to execute malicious JS scripts on the application...

An unspecified vulnerability exists in livehelperchat (CNVD-2022-55057)

livehelperchat is available via Live Assistant Chat, which provides free live support on the website. livehelperchat versions prior to 3.97 have a security vulnerability that could be exploited by attackers to generate a fake password reset link to steal a password reset token, which could lead t...

Host Header Injection

remdex/livehelperchat is vulnerable to host header injection. The library does not properly validate the URL for password reset which allows a malicious attacker to generate a fake password link and take over the user account...

livehelperchat Cross-Site Scripting Vulnerability (CNVD-2022-71405)

livehelperchat is available via livehelperchat, which provides free live support on the website. livehelperchat versions prior to 3.97 are vulnerable to a cross-site scripting vulnerability that originates in the GitHub repository livehelperchat/livehelperchat in livehelperchat An XSS vulnerabili...