CVE-2008-3840

Crafty Syntax Live Help (CSLH) 2.14.6 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.

Link	Resource
http://www.gulftech.org/?node=research&article_id=00127-08252008	Exploit Patch
http://securityreason.com/securityalert/4192
https://exchange.xforce.ibmcloud.com/vulnerabilities/44745
http://www.securityfocus.com/archive/1/495729/100/0/threaded

Configuration 1

cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.4:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.5:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.2:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.0:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.5:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.4:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.8:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.2:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.7:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.7:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.1:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.0:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.6:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.9:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.4:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.1:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.4:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.3:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.6:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.4:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.3:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.6:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.0:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.1:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.3:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.5:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.8.1:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.1:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.5:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.2:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.3:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.5:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.6:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.8.3:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.1:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:*:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.5:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.1:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.0:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.8.4:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.13.0:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.3:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.7:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.8:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.2:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.8.0:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.0:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.7:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.7.2:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.4:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:1.4:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.7.1:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.3:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.0:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.1:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.2:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.8.2:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.2:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.7:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.13.1:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.10.5:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.9.6:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.11.3:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.14.2:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.12.0:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.7.3:*:*:*:*:*:*:* cpe:2.3:a:craftysyntax:crafty_syntax_live_help:2.7.4:*:*:*:*:*:*:*

---

Published : 2008-08-27 08:41

Updated : 2018-10-11 08:49

---

NVD link : CVE-2008-3840

Mitre link : CVE-2008-3840

No products.

CWE-255