CVE:CVE-2008-1183
CNNVD:CNNVD-200803-072
Crafty Syntax Live Help中存在多个跨站脚本漏洞，远程攻击者借助到(1)livehelp.php,(2)user_questions.php和(3)leavemessage.php的未明参数，注入任意的Web脚本或HTML。
solution:Upgrade crafty_syntax_live_help crafty_syntax_live_help to a higher version than 2.4.13,2.4.14,2.4.15,and avoid the version 2.4.13,2.4.14,2.4.15