File Upload Vulnerability in WeLive Online Customer Service System of Beijing Wein Software

WeLive customer service system uses WebSocket communication technology, based on PHP development, does not rely on the official server. It supports full-duplex communication between the client browser and the remote host, that is, it allows the server to actively push information to the client,...

WeLive online customer service system suffers from arbitrary file download vulnerability

WeLive Online Customer Service System is an online online customer service system. WeLive Online Customer Service System has an arbitrary file download vulnerability. An attacker can use this vulnerability to download arbitrary files from the server and obtain sensitive information...

File Containment Vulnerability in WeLive Online Customer Service System

WeLive online customer service system is a small program, easy to install and use online online customer service system. WeLive Online Customer Service System has a file inclusion vulnerability that can be exploited by an attacker to write arbitrary script files and gain system privileges...

Arbitrary file deletion vulnerability in WeLive online customer service system

WeLive online customer service system is a small program, easy to install and use online online customer service system. WeLive Online Customer Service System has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

WeLive online customer service system suffers from arbitrary file download vulnerability

WeLive online customer service system is a small program, easy to install and use online online customer service system. WeLive Online Customer Service System has an arbitrary file download vulnerability that can be exploited by an attacker to obtain sensitive information...

WeLive da***.php file has an arbitrary file deletion download vulnerability

WeLive online customer service system is a small program, easy to install and use online online customer service system. WeLive da.php file exists arbitrary file deletion and download vulnerability, an attacker can use the vulnerability can be cross-directory download, delete arbitrary files...

Code execution vulnerability in welive v5.0.0

WeLive v5.0.0 is an enterprise level customer service system. A code execution vulnerability exists in the WeLive v5.0.0 se.php file. An attacker can exploit this vulnerability to execute arbitrary code...