CVE-2008-1183
Published Mar 6, 2008
Last updated 7 years ago
Overview
- Description
- Multiple cross-site scripting (XSS) vulnerabilities in Crafty Syntax Live Help (CSLH) before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) livehelp.php, (2) user_questions.php, and (3) leavemessage.php. NOTE: the lostsheep.php vector is covered by CVE-2008-0848.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:crafty_syntax_live_help:crafty_syntax_live_help:2.4.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2C5D562-2748-4C02-9F8C-BF8EC30712AD"
},
{
"criteria": "cpe:2.3:a:crafty_syntax_live_help:crafty_syntax_live_help:2.4.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9FF5A42-F041-4EBE-A33B-465A6295D0BA"
},
{
"criteria": "cpe:2.3:a:crafty_syntax_live_help:crafty_syntax_live_help:2.4.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C88B291-9D39-4646-88BE-5377CCF9857A"
}
],
"operator": "OR"
}
]
}
]