CVE-2017-15869

Cross-site scripting XSS vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inject arbitrary web script or HTML via the search-for parameter...

CVE-2017-15869

CVE-2017-15869 affects LiveZilla’s knowledgebase.php, with XSS in the search-for parameter. Affected versions include 7.0.8.8 and earlier; the vendor fixed this in 7.0.8.9. Public advisories (e.g., PacketStorm/OpenVAS) confirm remote exploitation is possible, enabling arbitrary script injection i...

LiveZilla 7.0.6.0 Cross Site Scripting

ADVISORY SUMMARY LiveZilla - Cross-site scripting XSS vulnerability in knowledgebase.php Risk: Medium Application: LiveZilla Versions Affected: 7.0.6.0 Vendor: LiveZilla GmbH Vendor URL: https://www.livezilla.net/ Sent to vendor: 04.12.2017 Vendor response: Acknowledge 04.12.2017 Published fixed...