PT-2022-13734

Name of the Vulnerable Software and Affected Versions livehelperchat versions prior to 3.97 Description This issue has the potential to deface websites, result in compromised user accounts, and can run malicious code on web pages, which can lead to a compromise of the user’s device. It is being...

CVE-2022-1234: Improper Neutralization of Input During Web Page Generation

XSS in livehelperchat in GitHub repository livehelperchat/livehelperchat prior to 3.97. This vulnerability has the potential to deface websites, result in compromised user accounts, and can run malicious code on web pages, which can lead to a compromise of the user’s device...

CVE-2022-1235

Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96...

Design/Logic Flaw

Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96...

CVE-2022-1235 Weak secrethash can be brute-forced in livehelperchat/livehelperchat

Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96...

CVE-2022-1235 Weak secrethash can be brute-forced in livehelperchat/livehelperchat

Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96...

CVE-2022-1213

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191...

CVE-2022-1213

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191...

Server side request forgery (ssrf)

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191...

CVE-2022-1213

CVE-2022-1213 describes an SSRF bypass in LiveHelperChat. Affected: the GitHub repo livehelperchat/livehelperchat prior to version 3.67 (as stated in multiple connected entries). The issue is related to bypassing CVE-2022-1191. Other entries corroborate SSRF in LiveHelperChat, but the documents d...

CVE-2022-1213 SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191...

CVE-2022-1213 SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191...

livehelperchat 安全漏洞

livehelperchat is a chat via a live helper that provides free live support on a website. A security vulnerability exists in the GitHub repository livehelperchat/livehelperchat versions prior to 3.96, which stems from the ability to force the use of Weak secrethash...

livehelperchat 代码问题漏洞

livehelperchat is a chat via a live helper that provides free live support on a website. GitHub repository livehelperchat/livehelperchat A code issue vulnerability exists in versions prior to 3.67, which is exploited by attackers to allow the application to execute arbitrary requests...

PT-2022-13717 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: LiveHelperChat versions prior to 3.67 Description: The issue allows an attacker to bypass the SSRF filter on ports 80 and 433, making the application perform arbitrary requests. Recommendations: For versions prior to 3.67, update to version...

CVE-2022-1213: Server-Side Request Forgery (SSRF)

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191...

CVE-2022-1235: Use of Password Hash With Insufficient Computational Effort

Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96...

XSS in livehelperchat

Description LiveHelperChat is vulnerable to XSS in /cobrowse/checkmirrorchanges/ in it response the url parameter to json content while response content type is html. SETP1: set the url in following request POST /cobrowse/storenodemap/hash/174QXubVQ2cHdPR5xt5vNLBWVRnRwNu6MBWHoxRs3/?url= HTTP/1.1...

livehelperchat code issue vulnerability

livehelperchat is available via live helper chat, which provides free live support on the site. livehelperchat versions prior to 3.96 are vulnerable to a code issue stemming from SSRF on index.php/cobrowse/proxycss/. An attacker could exploit this vulnerability to cause the application to execute...

Type Confusion in LiveHelperChat

Live Helper Chat provides live support for your website. Loose comparison causes IDOR on multiple endpoints in LiveHelperChat prior to 3.96. There is a fix released in versions 3.96 and 3.97. Currently, there is no known workaround...