424 matches found
BIT-LIVEHELPERCHAT-2021-4177
livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information...
BIT-LIVEHELPERCHAT-2022-0226
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
BIT-LIVEHELPERCHAT-2022-0231
livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...
BIT-LIVEHELPERCHAT-2022-0266
Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v...
BIT-LIVEHELPERCHAT-2022-0374
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
BIT-LIVEHELPERCHAT-2022-0375
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
BIT-LIVEHELPERCHAT-2022-0394
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
BIT-LIVEHELPERCHAT-2022-0502
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
BIT-LIVEHELPERCHAT-2022-0612
Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...
BIT-LIVEHELPERCHAT-2022-0935
Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97...
BIT-LIVEHELPERCHAT-2022-1176
Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96...
BIT-LIVEHELPERCHAT-2022-1191
SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96...
BIT-LIVEHELPERCHAT-2022-1213
SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191...
BIT-LIVEHELPERCHAT-2022-1234
XSS in livehelperchat in GitHub repository livehelperchat/livehelperchat prior to 3.97. This vulnerability has the potential to deface websites, result in compromised user accounts, and can run malicious code on web pages, which can lead to a compromise of the user’s device...
BIT-LIVEHELPERCHAT-2022-1235
Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96...
BIT-LIVEHELPERCHAT-2022-1530
Cross-site Scripting XSS in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application...
GHSA-V4CP-2Q7V-HG9Q livehelperchat Server-Side Template Injection
Server-Side Template Injection SSTI vulnerability in livehelperchat before 4.34, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhcweb/modules/lhfaq/faqweight.php...
livehelperchat Server-Side Template Injection
Server-Side Template Injection SSTI vulnerability in livehelperchat before 4.34, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhcweb/modules/lhfaq/faqweight.php...
CVE-2024-27516
Server-Side Template Injection SSTI vulnerability in livehelperchat before 4.34v, allows remote attackers to execute arbitrary code and obtain sensitive information via the search parameter in lhcweb/modules/lhfaq/faqweight.php...
