Approved changes feed: RSS · Atom

cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.5:*:*:*:*:*:*:*

part: a version: 2.10.5 update: *

VendorCraftysyntax (28304a53-3412-5a5a-8a3d-214712553384)
ProductCrafty Syntax Live Help (c0f8ec91-7a0e-599b-9822-21a426821fb8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3845 vulnerable 2026-06-08 04:50:36.861840 Details available
Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands via the department parameter to (1) is_xmlhttp.php and (2) is_flush.php.
Published: 2008-08-27T23:00:00.000Z
Updated: 2024-08-07T09:53:00.305Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3840 vulnerable 2026-06-08 04:50:36.827848 Details available
Crafty Syntax Live Help (CSLH) 2.14.6 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.
Published: 2008-08-27T20:00:00.000Z
Updated: 2024-08-07T09:53:00.330Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.