457 matches found
CVE-2022-0231
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2022-0231
CSRF vulnerability in livehelperchat (CVE-2022-0231) is documented across multiple sources. The issue arises in the admin file configuration endpoint (/site_admin/file/configuration), where requests can be forged due to missing CSRF token validation. A successful exploit can allow an attacker to ...
CVE-2022-0231 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2022-0231 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
Description A CSRF issue is found in the SettingsLive help configurationFile Configuration. It was found that no CSRF token validation is getting done as no CSRF token is getting passed with the request. Proof of Concept Actual Request POST /siteadmin/file/configuration HTTP/1.1 Host:...
PT-2022-13050 · Unknown · Livehelperchat
Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: At the...
livehelperchat 跨站请求伪造漏洞
livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site request forgery vulnerability exists in livehelperchat, which stems from a WEB application that does not adequately validate whether a request is coming from a truste...
CVE-2022-0226: Cross-Site Request Forgery (CSRF)
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2022-0231: Cross-Site Request Forgery (CSRF)
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
GHSA-HX77-5P88-F92R livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
livehelperchat is vulnerable to Cross-site Scripting
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
GHSA-F7XW-46VH-5JW2 livehelperchat is vulnerable to Cross-site Scripting
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Information Disclosure
livehelperchat is vulnerable to information disclosure. The vulnerability exists in forgotpasswordsent.tpl.php because the error message indicates the password reset email sent which allows an attacker to gain access to sensitive information of an existing account...
Information disclosure
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...
CVE-2022-0083
livehelperchat is affected by CVE-2022-0083, a vulnerability described as Generation of Error Message Containing Sensitive Information. Multiple connected sources (NVD, OSV, GHSA, CNVD, CNNVD) confirm an information-disclosure issue arising from verbose or leaking error messages, with sources not...
CVE-2022-0083 Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...