CVE-2019-12939

LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the p_ext_rse parameter.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-06-24

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Livezilla (Livezilla)

References

• http://www.securityfocus.com/bid/108890
• https://forums.livezilla.net/index.php?/topic/10980-fg-vd-19-082-livezilla-server-is-vulnerable-to-sql-injection/