Unscored CVE-2008-3840 EUVD-2008-3826GHSA-994f-hjm2-v98x

Crafty Syntax Live Help (CSLH) 2.14.6 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attacke…

Published Aug 27, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Crafty Syntax Live Help (CSLH) 2.14.6 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.

References

http://www.gulftech.org/?node=research&article_id=00127-08252008
20080825 Crafty Syntax Live Help <= 2.14.6 SQL Injection mailing-list
crafty-syntax-info-disclosure(44745) vdb-entry
4192 third-party-advisory