CVE-2017-15869

概要

参考情報

• securityfocus.com/archive/1/541688/100/0/threaded · Exploit
• livezilla.net/changelog/en · Release Notes
• pallas.com/advisories/cve-2017-15869-livezilla-xss-knowledgebase · Exploit

livezilla のその他の脆弱性

• CVE-2020-9758緊急 9.6An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk). A blind JavaScript injection lies in the name parameter. Trig…
• CVE-2013-6225緊急 9.8LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability
• CVE-2019-12964中 6.1LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php Subject.
• CVE-2019-12963中 6.1LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action.
• CVE-2019-12962中 6.1LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.