NuytsTech Security

CVE-2008-3845

by ·

Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to execute arbitrary SQL commands via the department parameter to (1) is_xmlhttp.php and (2) is_flush.php.

Date published : 2008-08-27

http://www.securityfocus.com/bid/30825

http://www.securityfocus.com/archive/1/495729/100/0/threaded

Tags: