{"api_version":"1","generated_at":"2026-07-23T12:41:54+00:00","cve":"CVE-2008-3845","urls":{"html":"https://cve.report/CVE-2008-3845","api":"https://cve.report/api/cve/CVE-2008-3845.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-3845","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-3845"},"summary":{"title":"CVE-2008-3845","description":"Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands via the department parameter to (1) is_xmlhttp.php and (2) is_flush.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-08-27 23:41:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-89","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/archive/1/495729/100/0/threaded","name":"http://www.securityfocus.com/archive/1/495729/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.gulftech.org/?node=research&article_id=00127-08252008","name":"http://www.gulftech.org/?node=research&article_id=00127-08252008","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Contact Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/4192","name":"http://securityreason.com/securityalert/4192","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Crafty Syntax Live Help <= 2.14.6 SQL Injection - SecurityReason.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=620878","name":"http://sourceforge.net/project/shownotes.php?release_id=620878","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SourceForge.net: Crafty Syntax Live Help (CSLH): Files","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44669","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44669","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/31573","name":"http://secunia.com/advisories/31573","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Crafty Syntax Live Help \"department\" SQL Injection Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.exploit-db.com/exploits/6307","name":"https://www.exploit-db.com/exploits/6307","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Crafty Syntax Live Help <= 2.14.6 (department) SQL Injection Vuln","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://security.craftysyntax.com/updates/?v=2.14.6","name":"http://security.craftysyntax.com/updates/?v=2.14.6","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/30825","name":"http://www.securityfocus.com/bid/30825","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Crafty Syntax Live Help Multiple SQL Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3845","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3845","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.10.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.10.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.10.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.10.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.10.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.10.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.11.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.11.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.11.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.11.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.11.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.11.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.11.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.11.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.12.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.12.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.12.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.12.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.12.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.12.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.12.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.12.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.12.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.12.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.13.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.13.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.14.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.14.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.14.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.14.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.14.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"2.14.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"3845","vulnerable":"1","versionEndIncluding":"2.14.6","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"craftysyntax","cpe5":"crafty_syntax_live_help","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T09:53:00.305Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"6307","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/6307"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://security.craftysyntax.com/updates/?v=2.14.6"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://sourceforge.net/project/shownotes.php?release_id=620878"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.gulftech.org/?node=research&article_id=00127-08252008"},{"name":"20080825 Crafty Syntax Live Help <= 2.14.6 SQL Injection","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/495729/100/0/threaded"},{"name":"31573","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/31573"},{"name":"crafty-syntax-isxmlhttp-sql-injection(44669)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44669"},{"name":"30825","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/30825"},{"name":"4192","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/4192"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-08-25T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands via the department parameter to (1) is_xmlhttp.php and (2) is_flush.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-11T19:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"6307","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/6307"},{"tags":["x_refsource_CONFIRM"],"url":"http://security.craftysyntax.com/updates/?v=2.14.6"},{"tags":["x_refsource_CONFIRM"],"url":"http://sourceforge.net/project/shownotes.php?release_id=620878"},{"tags":["x_refsource_MISC"],"url":"http://www.gulftech.org/?node=research&article_id=00127-08252008"},{"name":"20080825 Crafty Syntax Live Help <= 2.14.6 SQL Injection","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/495729/100/0/threaded"},{"name":"31573","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/31573"},{"name":"crafty-syntax-isxmlhttp-sql-injection(44669)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44669"},{"name":"30825","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/30825"},{"name":"4192","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/4192"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-3845","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands via the department parameter to (1) is_xmlhttp.php and (2) is_flush.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"6307","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/6307"},{"name":"http://security.craftysyntax.com/updates/?v=2.14.6","refsource":"CONFIRM","url":"http://security.craftysyntax.com/updates/?v=2.14.6"},{"name":"http://sourceforge.net/project/shownotes.php?release_id=620878","refsource":"CONFIRM","url":"http://sourceforge.net/project/shownotes.php?release_id=620878"},{"name":"http://www.gulftech.org/?node=research&article_id=00127-08252008","refsource":"MISC","url":"http://www.gulftech.org/?node=research&article_id=00127-08252008"},{"name":"20080825 Crafty Syntax Live Help <= 2.14.6 SQL Injection","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/495729/100/0/threaded"},{"name":"31573","refsource":"SECUNIA","url":"http://secunia.com/advisories/31573"},{"name":"crafty-syntax-isxmlhttp-sql-injection(44669)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44669"},{"name":"30825","refsource":"BID","url":"http://www.securityfocus.com/bid/30825"},{"name":"4192","refsource":"SREASON","url":"http://securityreason.com/securityalert/4192"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-3845","datePublished":"2008-08-27T23:00:00.000Z","dateReserved":"2008-08-27T00:00:00.000Z","dateUpdated":"2024-08-07T09:53:00.305Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-08-27 23:41:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-89","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:*:*:*:*:*:*:*:*","versionEndIncluding":"2.14.6","matchCriteriaId":"B5FB9AC4-B63B-44C6-8772-458C23D19D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BBE656C4-BF6A-42BD-8303-EC73817F7A6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66D60B2A-4DAB-4C2B-B2DB-26FF04716FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FC075169-3A70-4123-8D3C-A26E5344A648"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.3:*:*:*:*:*:*:*","matchCriteriaId":"40852B54-1F4F-48BA-94BA-A92DF520A0B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.4:*:*:*:*:*:*:*","matchCriteriaId":"97EEE612-EC04-4DB5-B82C-EE2E53F5036F"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.5:*:*:*:*:*:*:*","matchCriteriaId":"321CAE6E-7697-4990-8132-5A4C02C8D41D"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.6:*:*:*:*:*:*:*","matchCriteriaId":"F4AD1E1F-8632-4255-9E24-C06B845C52DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.7:*:*:*:*:*:*:*","matchCriteriaId":"1E8A2C64-2F80-4CFB-9338-510C0B3667C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CA1A4C95-B276-4763-97AC-FCD0630F3CC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4C6CCE39-65AC-4E0D-8DAB-7ED07B3ACC59"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.0:*:*:*:*:*:*:*","matchCriteriaId":"0C88102A-C1AE-4523-B6A1-EBA336D0E79F"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.1:*:*:*:*:*:*:*","matchCriteriaId":"1EF401FE-7A2C-4BFB-91F3-5E777E48C662"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.2:*:*:*:*:*:*:*","matchCriteriaId":"F5BA9819-BFBC-47FD-945C-BB6EFE69B249"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.3:*:*:*:*:*:*:*","matchCriteriaId":"3B2A4737-8606-4D01-801B-7ABF238CC15B"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.4:*:*:*:*:*:*:*","matchCriteriaId":"D412260D-7FBC-4E7C-B9C8-91A84DB8323D"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.5:*:*:*:*:*:*:*","matchCriteriaId":"8D86D4D3-8123-45DB-A973-88C06E88BD1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.0:*:*:*:*:*:*:*","matchCriteriaId":"4476BDE7-4BE7-405A-94B3-033F3C63A3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.1:*:*:*:*:*:*:*","matchCriteriaId":"83D333B9-C879-46CB-849F-F587D8C582C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.2:*:*:*:*:*:*:*","matchCriteriaId":"ADCEC7D1-CE54-4E3C-8366-BF8CC52AD7D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"02D7A972-D4F9-477B-B084-4C7C2693CAB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.4:*:*:*:*:*:*:*","matchCriteriaId":"7F31A5C9-EF8A-43AD-A1B1-B086B191D9A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.5:*:*:*:*:*:*:*","matchCriteriaId":"D4789831-8986-4320-AB8C-55D2C56E1D0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.6:*:*:*:*:*:*:*","matchCriteriaId":"EFE6075D-9A55-4404-A1CE-057E8CC52F9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.7:*:*:*:*:*:*:*","matchCriteriaId":"5E7A9AA0-9705-468E-B074-FB237C0F3812"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF8C79BA-D9F1-47FA-B41E-6B027FEC4EC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.1:*:*:*:*:*:*:*","matchCriteriaId":"D2F505F6-68CC-40F2-B057-F7E438A59DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.2:*:*:*:*:*:*:*","matchCriteriaId":"AD3FFA0A-4FA7-421E-81A7-BA1745254CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.3:*:*:*:*:*:*:*","matchCriteriaId":"FEC16207-23C9-4B3F-990D-F75A19C4A18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.4:*:*:*:*:*:*:*","matchCriteriaId":"A5222A77-77DB-44AE-BA86-328E81B20CB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.5:*:*:*:*:*:*:*","matchCriteriaId":"5651E8F4-F1E4-4D5C-BD2B-3ED3CB12AC82"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.6:*:*:*:*:*:*:*","matchCriteriaId":"ED915AA1-0EEF-4CCC-BD6B-72C2FD7CB062"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.7:*:*:*:*:*:*:*","matchCriteriaId":"83EDB136-73AA-490A-9127-3BE58DC0BF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF50AD2-A709-43CE-B4AA-9B83796086B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.9:*:*:*:*:*:*:*","matchCriteriaId":"2DCC24DA-89F4-4CB4-BEAD-DE190FD43733"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.13.0:*:*:*:*:*:*:*","matchCriteriaId":"1B7FCE7C-005F-416C-8D50-67E6BD468990"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.13.1:*:*:*:*:*:*:*","matchCriteriaId":"1EF70D7A-0F6E-4E4E-AD6C-08306AC5F330"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.0:*:*:*:*:*:*:*","matchCriteriaId":"7135EADC-BBAE-44FC-87B2-5522D4F8DE70"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"B41549BB-EFC4-44C6-B655-F20DED3B8B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"400412F2-7DF0-4639-B199-887576BCD2A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"7B1DF873-246E-4784-8E45-80E67C215AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"3E0CAAB8-2537-4931-A860-AF24B25C130D"},{"vulnerable":true,"criteria":"cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"6086FB69-0DF4-4F72-A0CF-B3C2BC575361"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"3845","Ordinal":"1","Title":"CVE-2008-3845","CVE":"CVE-2008-3845","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"3845","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands via the department parameter to (1) is_xmlhttp.php and (2) is_flush.php.","Type":"Description","Title":"CVE-2008-3845"},{"CveYear":"2008","CveId":"3845","Ordinal":"2","NoteData":"2008-08-27","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"3845","Ordinal":"3","NoteData":"2018-10-11","Type":"Other","Title":"Modified"}]}}}