199 matches found
CVE-2019-12960
LiveZilla Server contains a SQL Injection vulnerability in functions.internal.build.inc.php via the parameter p_dt_s_d, affecting versions prior to 8.0.1.1. The issue allows an attacker to execute illegal SQL commands with the potential for data disclosure or modification. The CVE entry is corrob...
CVE-2019-12961: Improper Neutralization of Formula Elements in a CSV File
LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function...
CVE-2019-12963: Improper Neutralization of Input During Web Page Generation
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action...
CVE-2019-12962: Improper Neutralization of Input During Web Page Generation
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header...
LiveZilla Server Denial of Service Vulnerability
LiveZilla Server is a free online customer service system from LiveZilla Germany. The system provides real-time monitoring of visitors, offline messages, GeoTracking map tracking, access statistics, online chat and other features. A denial of service vulnerability exists in the knowledgebase.php...
LiveZilla Server SQL Injection Vulnerability
LiveZilla Server is a free online customer service system from LiveZilla Germany. The system provides real-time monitoring of visitors, offline messages, GeoTracking map tracking, access statistics, online chat and other features. A SQL injection vulnerability exists in the server.php file in...
CVE-2019-12960: Improper Neutralization of Special Elements used in an SQL Command
LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc.php via the parameter pdtsd...
CVE-2019-12964: Improper Neutralization of Input During Web Page Generation
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject...
CVE-2019-12940
LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service memory consumption in knowledgebase.php via a large integer value of the depth parameter...
CVE-2019-12939
LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the pextrse parameter...
CVE-2019-12940
LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service memory consumption in knowledgebase.php via a large integer value of the depth parameter...
CVE-2019-12939
LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the pextrse parameter...
Design/Logic Flaw
LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service memory consumption in knowledgebase.php via a large integer value of the depth parameter...
Sql injection
LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the pextrse parameter...
CVE-2019-12940
LiveZilla Server is vulnerable prior to 8.0.1.1 to a Denial of Service via memory consumption in knowledgebase.php caused by a large integer value for the depth parameter. The issue is documented across multiple sources (e.g., CVE-2019-12940 entries and Red Hat advisory) and affects LiveZilla Ser...
CVE-2019-12940
LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service memory consumption in knowledgebase.php via a large integer value of the depth parameter...
CVE-2019-12939
LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the pextrse parameter...
CVE-2019-12939
LiveZilla Server is affected by CVE-2019-12939: a SQL Injection in server.php via the p_ext_rse parameter, impacting LiveZilla Server builds before 8.0.1.1. Public records corroborate an exploitable path leading to partial confidentiality, integrity, and availability impacts (NVD cvss2 base 7.5; ...
CVE-2019-12939: Improper Neutralization of Special Elements used in an SQL Command
LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the pextrse parameter...
CVE-2019-12940: Allocation of Resources Without Limits or Throttling
LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service memory consumption in knowledgebase.php via a large integer value of the depth parameter...