PatchTheCVElive support vulnerabilities and fixes
Recent CVEs affecting live support, with upgrade or downgrade steps. 2 tracked.
Also searched as: livesupport.
live support has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-05-21. Highest priority: CVE-2007-2775 (score 63/100).
- CVE-2007-2775 HIGH 10.0 DOWNGRADE AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credent
- CVE-2006-5927 HIGH 7.5 DOWNGRADE DOWNGRADE SQL injection vulnerability in cpLogin.asp in ASP Scripter Easy Portal 1.4 and Live Support 1.3 allows remote
FAQ
How do I fix live support vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is live support being exploited right now?
None of the tracked live support CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which live support CVE should I patch first?
CVE-2007-2775 currently ranks highest (63/100): AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credent.