Lucene search
+L

4 matches found

osv_ghsa
osv_ghsa
•added 2024/02/29 3:33 a.m.•78 views

GHSA-V4CP-2Q7V-HG9Q livehelperchat Server-Side Template Injection

Server-Side Template Injection SSTI vulnerability in livehelperchat before 4.34, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhcweb/modules/lhfaq/faqweight.php...

9.8CVSS9.8AI score0.01472EPSS
SaveExploits0References4
NVD
NVD
•added 2024/02/29 1:44 a.m.•38 views

CVE-2024-27516

Server-Side Template Injection SSTI vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhcweb/modules/lhfaq/faqweight.php...

9.8CVSS7.5AI score0.01472EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/28 12:00 a.m.•9 views

CVE-2024-27516: Improper Neutralization of Special Elements used in an OS Command

Server-Side Template Injection SSTI vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhcweb/modules/lhfaq/faqweight.php...

9.8CVSS6.5AI score0.01472EPSS
SaveExploits0References2
Mend
Mend
•added 2024/02/28 12:00 a.m.•7 views

CVE-2024-27516

Server-Side Template Injection SSTI vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhcweb/modules/lhfaq/faqweight.php...

9.8CVSS0.01472EPSS
SaveExploits0References5
Rows per page
Query Builder