Livezilla
Vendor:
First CVE: Dec 29, 2009 · Active for 16 years
21
Total CVEs
More Total CVEs than 94% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
6.2
Avg CVSS
Higher Avg CVSS than 25% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Livezilla over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 29, 2009
16 years ago
Most Recent CVE
Mar 9, 2020
2,328 days ago
CVE Severity & Scoring
Livezilla21 CVEs
67%
10%
19%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network11 (52.4%)
Unknown10 (47.6%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low10 (47.6%)
High1 (4.8%)
Unknown10 (47.6%)
User Interaction
None4 (19.0%)
Unknown10 (47.6%)
Required7 (33.3%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None11 (52.4%)
Unknown10 (47.6%)
Top CVEs
Signals from CVEs in this product scope (21 CVEs).
21 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-6225CRITICAL LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability | Jan 13, 2020 | 9.8 | 48 | NO | YES |
CVE-2019-12962MEDIUM LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header. | Jun 25, 2019 | 6.1 | 44 | NO | YES |
CVE-2020-9758CRITICAL An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 (Helpdesk). A blind JavaScript injection lies in the name parameter. Triggering this can fetch the username and p | Mar 9, 2020 | 9.6 | 30 | NO | NO |
CVE-2019-12960CRITICAL LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in functions.internal.build.inc.php via the parameter p_dt_s_d. | Jun 25, 2019 | 9.8 | 30 | NO | NO |
CVE-2019-12939CRITICAL LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the p_ext_rse parameter. | Jun 24, 2019 | 9.8 | 29 | NO | NO |
CVE-2019-12961HIGH LiveZilla Server before 8.0.1.1 is vulnerable to CSV Injection in the Export Function. | Jun 25, 2019 | 8.8 | 27 | NO | NO |
CVE-2010-4276MEDIUM Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers to inject arbitrary we | Dec 30, 2010 | 4.3 | 26 | NO | YES |
CVE-2013-7034HIGH The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows remote attackers to execute arbitrary PHP code via a serialized PHP object in a cook | May 5, 2014 | 7.5 | 24 | NO | NO |
CVE-2013-7385MEDIUM LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which allows remote attackers | May 19, 2014 | 6.8 | 22 | NO | NO |
CVE-2009-4450MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lat, (2) lng, and (3) | Dec 29, 2009 | 4.3 | 22 | NO | YES |
Exploit Exposure
Signals from CVEs in this product scope (21 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
4.8% of CVEs· 97th percentile
ExploitDB
4 CVEs
19.0% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (21 CVEs).
Media Mentions
Signals from CVEs in this product scope (21 CVEs).
Top CNAs Publishing CVEs For Livezilla
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.1.2.0 | 1 | 6.8 | 1.3% | 0 | 0 |
| 5.1.1.0 | 4 | 5.7 | 1.5% | 0 | 0 |
| 5.1.0.0 | 5 | 5.4 | 1.5% | 0 | 0 |
| 5.0.1.4 | 9 | 5.3 | 4.2% | 0 | 1 |
| 5.0.1.3 | 8 | 4.7 | 1.4% | 0 | 0 |
| 5.0.1.2 | 8 | 4.7 | 1.4% | 0 | 0 |
| 5.0.1.1 | 8 | 4.7 | 1.4% | 0 | 0 |
| 5.0.1.0 | 8 | 4.7 | 1.4% | 0 | 0 |
| 4.2.0.5 | 6 | 4.5 | 1.5% | 0 | 0 |
| 4.2.0.4 | 6 | 4.5 | 1.5% | 0 | 0 |
| 4.1.0.4 | 6 | 4.5 | 1.5% | 0 | 0 |
| 4.1.0.3 | 6 | 4.5 | 1.5% | 0 | 0 |
| 4.0.1.2 | 6 | 4.5 | 1.5% | 0 | 0 |
| 4.0.1.1 | 6 | 4.5 | 1.5% | 0 | 0 |
| 4.0.1.0 | 6 | 4.5 | 1.5% | 0 | 0 |
| 3.2.0.2 | 7 | 4.4 | 1.5% | 0 | 1 |
| 3.1.8.3 | 7 | 4.4 | 1.5% | 0 | 1 |