PT-2011-4613

Name of the Vulnerable Software and Affected Versions Crafty Syntax version 3.0.2 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as README FILES/livehelp.php, which reveals the...

CVE-2011-3723: Exposure of Sensitive Information to an Unauthorized Actor

Crafty Syntax 3.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by READMEFILES/livehelp.php and certain other files...

CVE-2008-1183: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Crafty Syntax Live Help CSLH before 2.14.6 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 livehelp.php, 2 userquestions.php, and 3 leavemessage.php. NOTE: the lostsheep.php vector is covered by...