CVE-2008-3845
published 2008-08-27CVE-2008-3845: Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands via the…
PriorityP345high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
1.77%
75.4th percentile
Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands via the department parameter to (1) is_xmlhttp.php and (2) is_flush.php.
Affected
43 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| craftysyntax | crafty_syntax_live_help | <= 2.14.6 | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
| craftysyntax | crafty_syntax_live_help | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/31573http://security.craftysyntax.com/updates/?v=2.14.6http://securityreason.com/securityalert/4192http://sourceforge.net/project/shownotes.php?release_id=620878http://www.gulftech.org/?node=research&article_id=00127-08252008http://www.securityfocus.com/archive/1/495729/100/0/threadedhttp://www.securityfocus.com/bid/30825https://exchange.xforce.ibmcloud.com/vulnerabilities/44669https://www.exploit-db.com/exploits/6307http://secunia.com/advisories/31573http://security.craftysyntax.com/updates/?v=2.14.6http://securityreason.com/securityalert/4192http://sourceforge.net/project/shownotes.php?release_id=620878http://www.gulftech.org/?node=research&article_id=00127-08252008http://www.securityfocus.com/archive/1/495729/100/0/threadedhttp://www.securityfocus.com/bid/30825https://exchange.xforce.ibmcloud.com/vulnerabilities/44669https://www.exploit-db.com/exploits/6307
2008-08-27
Published