Craftysyntax

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Craftysyntax records in CISA KEV

No Craftysyntax vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Crafty Syntax Live Help 2 records LOW Crafty Syntax 1 record LOW

Records

3 records

TI-2008-03684 CVE-2008-3845 · GHSA-w3rx-97v5-gqrg

Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and…

LOW 36

Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands via the department parameter to (1) is_xmlhttp.php and (2) is_flush.php…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01773 Published 2008-08-27 No fix listed CWE-89

TI-2011-03280 CVE-2011-3723 · GHSA-962f-jqh8-rvq6

Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct…

LOW 26

Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by README_FILES/livehelp.php and c…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01335 Published 2011-09-23 No fix listed CWE-200

TI-2008-03679 CVE-2008-3840 · GHSA-994f-hjm2-v98x

Crafty Syntax Live Help (CSLH) 2.14.6 and earlier stores passwords in cleartext in a…

LOW 25

Crafty Syntax Live Help (CSLH) 2.14.6 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01182 Published 2008-08-27 No fix listed CWE-255

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0