Vulnerabilities

TI-2008-03684 CVE-2008-3845 · GHSA-w3rx-97v5-gqrg

Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and…

LOW 36

Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands via the department parameter to (1) is_xmlhttp.php and (2) is_flush.php…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01773 Published 2008-08-27 No fix listed CWE-89

TI-2008-03679 CVE-2008-3840 · GHSA-994f-hjm2-v98x

Crafty Syntax Live Help (CSLH) 2.14.6 and earlier stores passwords in cleartext in a…

LOW 25

Crafty Syntax Live Help (CSLH) 2.14.6 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01182 Published 2008-08-27 No fix listed CWE-255

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and…

Crafty Syntax Live Help (CSLH) 2.14.6 and earlier stores passwords in cleartext in a…