Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

clansphere clansphere vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-2345
Multiple SQL injection vulnerabilities in ClanSphere prior to 2009.0.1 allow remote malicious users to execute arbitrary SQL commands via unknown parameters to the gbook module and unspecified other components.
Clansphere Clansphere 2007.4.4Clansphere Clansphere 2007.4.3Clansphere Clansphere 2007.4.2Clansphere Clansphere 2007.4.1Clansphere Clansphere 2009.0Clansphere Clansphere 2008.2.1Clansphere Clansphere 2008.2Clansphere Clansphere 2008.1Clansphere Clansphere 2008Clansphere Clansphere 2007.4Clansphere Clansphere
NA
CVE-2008-6470
Multiple unspecified vulnerabilities in ClanSphere prior to 2008.2.1 allow remote malicious users to obtain sensitive information, and possibly have unknown other impact, via vectors related to "javascript insert" and the (1) mods/messages/getusers.php and (2) mods/abco...
Clansphere Clansphere 2007.4.3Clansphere ClansphereClansphere Clansphere 2007.3.1Clansphere Clansphere 2007.4.1Clansphere Clansphere 2007.4.2Clansphere Clansphere 2007.4Clansphere Clansphere 2007.4.4
NA
CVE-2010-1865
Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and previous versions allow remote malicious users to execute arbitrary SQL commands via (1) the IP address to the cs_getip function in generate.php in the Captcha module, or (2) the s_email parameter to the cs_sql_sel...
Csphere Clansphere 2009.0.1Csphere Clansphere 2009.0Csphere Clansphere 2007.4.4Csphere Clansphere 2007.4.3Csphere Clansphere 2007.2Csphere Clansphere 2007.1Csphere Clansphere 2008.2.1Csphere Clansphere 2008.2Csphere Clansphere 2007.4Csphere Clansphere 2007.3.1Csphere Clansphere 2007Csphere ClansphereCsphere Clansphere 2009.0.2Csphere Clansphere 2008.1Csphere Clansphere 2008.0Csphere Clansphere 2007.3Csphere Clansphere 2007.2.1Csphere Clansphere 2007.4.2Csphere Clansphere 2007.4.1Csphere Clansphere 2007.0
NA
CVE-2009-2438
Cross-site scripting (XSS) vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote malicious users to inject arbitrary web script or HTML via the text parameter in a list action. NOTE: this might overlap CVE-2008-1399.
Clansphere Clansphere 2009.0Clansphere Clansphere 2009.0.2
NA
CVE-2008-0489
Directory traversal vulnerability in install.php in Clansphere 2007.4.4 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.
Clansphere Clansphere 2007.4.4
NA
CVE-2007-5061
SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote malicious users to execute arbitrary SQL commands via the cat_id parameter to index.php in a banners action.
Clansphere Clansphere 2007.4
NA
CVE-2008-1399
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Clansphere 2008 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party i...
Clansphere Clansphere 2008
NA
CVE-2014-100010
Cross-site scripting (XSS) vulnerability in ClanSphere 2011.4 allows remote malicious users to inject arbitrary web script or HTML via the where parameter in a list action to index.php.
Csphere Clansphere 2011.4
NA
CVE-2011-3714
ClanSphere 2010.0 allows remote malicious users to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by mods/board/attachment.php.
Csphere Clansphere 2010.0
6.1
CVSSv3
CVE-2021-27309
Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter.
Csphere Clansphere 2011.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-30310CVE-2024-21683CVE-2024-22187chromedeserializationXPath injectionCVE-2024-27842denial of serviceCVE-2024-24851googleCVE-2024-35400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook