Craftysyntax

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Craftysyntax records in CISA KEV

No Craftysyntax vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Crafty Syntax Live Help 2 records LOW Crafty Syntax 1 record LOW

Records

2 records in Crafty Syntax Live Help · all components

TI-2008-03684 CVE-2008-3845 · GHSA-w3rx-97v5-gqrg

Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and…

LOW 36

Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands via the department parameter to (1) is_xmlhttp.php and (2) is_flush.php…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01773 Published 2008-08-27 No fix listed CWE-89

TI-2008-03679 CVE-2008-3840 · GHSA-994f-hjm2-v98x

Crafty Syntax Live Help (CSLH) 2.14.6 and earlier stores passwords in cleartext in a…

LOW 25

Crafty Syntax Live Help (CSLH) 2.14.6 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01182 Published 2008-08-27 No fix listed CWE-255

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0