Lucene search
K

418 matches found

CNNVD
CNNVD
added 2022/01/14 12:0 a.m.2 views

livehelperchat 跨站请求伪造漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site request forgery vulnerability exists in livehelperchat, which stems from a WEB application that does not adequately validate whether a request is coming from a truste...

4.3CVSS5.5AI score0.00434EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/01/14 12:0 a.m.1 views

PT-2022-13050 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: At the...

6.5CVSS5.4AI score0.00512EPSS
Exploits1References7
Github Security Blog
Github Security Blog
added 2022/01/05 8:33 p.m.29 views

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

8.8CVSS2.6AI score0.00539EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/01/05 8:33 p.m.9 views

GHSA-HX77-5P88-F92R livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

8.8CVSS8.7AI score0.00539EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/01/05 8:33 p.m.28 views

livehelperchat is vulnerable to Cross-site Scripting

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.3CVSS1.9AI score0.00634EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/01/05 8:33 p.m.17 views

GHSA-F7XW-46VH-5JW2 livehelperchat is vulnerable to Cross-site Scripting

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS5.3AI score0.00634EPSS
Exploits1References4
Veracode
Veracode
added 2022/01/05 9:58 a.m.16 views

Information Disclosure

livehelperchat is vulnerable to information disclosure. The vulnerability exists in forgotpasswordsent.tpl.php because the error message indicates the password reset email sent which allows an attacker to gain access to sensitive information of an existing account...

5.3CVSS2.6AI score0.00899EPSS
Exploits1References3Affected Software1
Prion
Prion
added 2022/01/04 7:15 a.m.15 views

Information disclosure

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...

5CVSS5.2AI score0.00899EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2022/01/04 6:15 a.m.75 views

CVE-2022-0083

livehelperchat is affected by CVE-2022-0083, a vulnerability described as Generation of Error Message Containing Sensitive Information. Multiple connected sources (NVD, OSV, GHSA, CNVD, CNNVD) confirm an information-disclosure issue arising from verbose or leaking error messages, with sources not...

7.3CVSS5.4AI score0.00899EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/01/04 6:15 a.m.19 views

CVE-2022-0083 Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...

7.3CVSS6.3AI score0.00899EPSS
Exploits1References4
Cvelist
Cvelist
added 2022/01/04 6:15 a.m.34 views

CVE-2022-0083 Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...

7.3CVSS5.5AI score0.00899EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/01/04 12:0 a.m.2 views

PT-2022-12967 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue concerns the generation of error messages that contain sensitive information. There is a noticeable difference in the error messages produced for existing and non-existing...

7.3CVSS5.8AI score0.00899EPSS
Exploits1References7
CNVD
CNVD
added 2021/12/30 12:0 a.m.21 views

livehelperchat cross-site scripting vulnerability (CNVD-2022-01684)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

6.6CVSS5.2AI score0.00531EPSS
Exploits1References1
CNVD
CNVD
added 2021/12/30 12:0 a.m.17 views

livehelperchat cross-site scripting vulnerability (CNVD-2022-01685)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

6.1CVSS6AI score0.00785EPSS
Exploits1References1
OSV
OSV
added 2021/12/29 3:15 p.m.12 views

CVE-2021-4176

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS6.8AI score
Exploits0References2
OSV
OSV
added 2021/12/29 3:15 p.m.12 views

CVE-2021-4175

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS6.8AI score
Exploits0References2
NVD
NVD
added 2021/12/29 3:15 p.m.10 views

CVE-2021-4176

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS0.00785EPSS
Exploits1References2
NVD
NVD
added 2021/12/29 3:15 p.m.11 views

CVE-2021-4175

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.6CVSS0.00531EPSS
Exploits1References2
Prion
Prion
added 2021/12/29 3:15 p.m.7 views

Cross site scripting

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

3.5CVSS5.4AI score0.00531EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2021/12/29 3:15 p.m.16 views

Cross site scripting

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

4.3CVSS6.2AI score0.00785EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder