EUVD-2019-4516

Malware in sbrugna...

CVE-2019-12940

LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service memory consumption in knowledgebase.php via a large integer value of the depth parameter...

Design/Logic Flaw

LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service memory consumption in knowledgebase.php via a large integer value of the depth parameter...

CVE-2019-12940

LiveZilla Server is vulnerable prior to 8.0.1.1 to a Denial of Service via memory consumption in knowledgebase.php caused by a large integer value for the depth parameter. The issue is documented across multiple sources (e.g., CVE-2019-12940 entries and Red Hat advisory) and affects LiveZilla Ser...

CVE-2019-12940

LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service memory consumption in knowledgebase.php via a large integer value of the depth parameter...

PT-2019-13039

Name of the Vulnerable Software and Affected Versions LiveZilla Server versions prior to 8.0.1.1 Description The issue allows for Denial Of Service due to memory consumption. This occurs in the knowledgebase.php file when a large integer value is passed to the depth parameter. Recommendations For...

CVE-2019-12940: Allocation of Resources Without Limits or Throttling

LiveZilla Server before 8.0.1.1 is vulnerable to Denial Of Service memory consumption in knowledgebase.php via a large integer value of the depth parameter...

CVE-2017-15869

CVE-2017-15869 affects LiveZilla’s knowledgebase.php, with XSS in the search-for parameter. Affected versions include 7.0.8.8 and earlier; the vendor fixed this in 7.0.8.9. Public advisories (e.g., PacketStorm/OpenVAS) confirm remote exploitation is possible, enabling arbitrary script injection i...

PT-2018-6026

Name of the Vulnerable Software and Affected Versions: LiveZilla versions prior to 7.0.8.9 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the search-for parameter in the knowledgebase.php file...

CVE-2017-15869: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inject arbitrary web script or HTML via the search-for parameter...

LiveZilla 7.0.6.0 Cross Site Scripting

ADVISORY SUMMARY LiveZilla - Cross-site scripting XSS vulnerability in knowledgebase.php Risk: Medium Application: LiveZilla Versions Affected: 7.0.6.0 Vendor: LiveZilla GmbH Vendor URL: https://www.livezilla.net/ Sent to vendor: 04.12.2017 Vendor response: Acknowledge 04.12.2017 Published fixed...

CVE-2005-4235

CVE-2005-4235 describes a cross-site scripting (XSS) vulnerability in knowledgebase.php of WHMCompleteSolution 2.1 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the search parameters, affecting the affected WHMCompleteSolution product. No remediation det...

CVE-2005-4235: Undefined Security Weakness

Cross-site scripting XSS vulnerability in knowledgebase.php in WHMCompleteSolution 2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameters...

CVE-2005-1963: Undefined Security Weakness

Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to 1 reports.php, 2 knowledgebase.php, or 3 configuration.php, which leaks the information in a PHP error message...