CVE-2019-12939

CRITICAL

LiveZilla < 8.0.1.1 - SQL Injection via p_ext_rse Parameter

Title source: llm

LiveZilla Server before 8.0.1.1 is vulnerable to SQL Injection in server.php via the p_ext_rse parameter.

Core 2

Core References

Exploit, Issue Tracking, Vendor Advisory x_refsource_misc

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

CVSS v3 9.8

EPSS 0.0136

EPSS Percentile 68.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-89

Status published

Products (1)

livezilla/livezilla < 8.0.1.1

Published Jun 24, 2019

Tracked Since Feb 18, 2026