CVE-2022-0231

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

Cross site request forgery (csrf)

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2022-0231 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2022-0231

CSRF vulnerability in livehelperchat (CVE-2022-0231) is documented across multiple sources. The issue arises in the admin file configuration endpoint (/site_admin/file/configuration), where requests can be forged due to missing CSRF token validation. A successful exploit can allow an attacker to ...

CVE-2022-0231 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

Description A CSRF issue is found in the SettingsLive help configurationFile Configuration. It was found that no CSRF token validation is getting done as no CSRF token is getting passed with the request. Proof of Concept Actual Request POST /siteadmin/file/configuration HTTP/1.1 Host:...

livehelperchat 跨站请求伪造漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site request forgery vulnerability exists in livehelperchat, which stems from a WEB application that does not adequately validate whether a request is coming from a truste...

PT-2022-13050 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: At the...

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

GHSA-HX77-5P88-F92R livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

livehelperchat is vulnerable to Cross-site Scripting

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

GHSA-F7XW-46VH-5JW2 livehelperchat is vulnerable to Cross-site Scripting

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Information Disclosure

livehelperchat is vulnerable to information disclosure. The vulnerability exists in forgotpasswordsent.tpl.php because the error message indicates the password reset email sent which allows an attacker to gain access to sensitive information of an existing account...

Information disclosure

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...

CVE-2022-0083

livehelperchat is affected by CVE-2022-0083, a vulnerability described as Generation of Error Message Containing Sensitive Information. Multiple connected sources (NVD, OSV, GHSA, CNVD, CNNVD) confirm an information-disclosure issue arising from verbose or leaking error messages, with sources not...

CVE-2022-0083 Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...

CVE-2022-0083 Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...

PT-2022-12967 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue concerns the generation of error messages that contain sensitive information. There is a noticeable difference in the error messages produced for existing and non-existing...

livehelperchat cross-site scripting vulnerability (CNVD-2022-01684)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

livehelperchat cross-site scripting vulnerability (CNVD-2022-01685)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...