Clansphere

Clansphere

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2012-10034

Exploit
  • EPSS 1.28%
  • Veröffentlicht 05.08.2025 20:00:40
  • Zuletzt bearbeitet 23.09.2025 18:46:19

ClanSphere 2011.3 is vulnerable to a local file inclusion (LFI) flaw due to improper handling of the cs_lang cookie parameter. The application fails to sanitize user-supplied input, allowing attackers to traverse directories and read arbitrary files ...

4.3

CVE-2009-2438

Exploit
  • EPSS 1.48%
  • Veröffentlicht 13.07.2009 14:30:00
  • Zuletzt bearbeitet 16.06.2026 23:09:27

Cross-site scripting (XSS) vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inject arbitrary web script or HTML via the text parameter in a list action. NOTE: this might overlap CVE-2008-13...

7.5

CVE-2009-2345

  • EPSS 1.06%
  • Veröffentlicht 07.07.2009 19:30:00
  • Zuletzt bearbeitet 16.06.2026 23:09:15

Multiple SQL injection vulnerabilities in ClanSphere before 2009.0.1 allow remote attackers to execute arbitrary SQL commands via unknown parameters to the gbook module and unspecified other components.

5

CVE-2008-6470

  • EPSS 1.49%
  • Veröffentlicht 13.03.2009 10:30:00
  • Zuletzt bearbeitet 16.06.2026 23:02:17

Multiple unspecified vulnerabilities in ClanSphere before 2008.2.1 allow remote attackers to obtain sensitive information, and possibly have unknown other impact, via vectors related to "javascript insert" and the (1) mods/messages/getusers.php and (...

4.3

CVE-2008-1399

Exploit
  • EPSS 1.06%
  • Veröffentlicht 20.03.2008 10:44:00
  • Zuletzt bearbeitet 16.06.2026 22:51:39

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Clansphere 2008 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained ...

5

CVE-2008-0489

Exploit
  • EPSS 2.72%
  • Veröffentlicht 30.01.2008 22:00:00
  • Zuletzt bearbeitet 16.06.2026 22:49:44

Directory traversal vulnerability in install.php in Clansphere 2007.4.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.

7.5

CVE-2007-5061

Exploit
  • EPSS 1.17%
  • Veröffentlicht 24.09.2007 22:17:00
  • Zuletzt bearbeitet 16.06.2026 22:45:22

SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter to index.php in a banners action.