CVE-2022-43119

CVE-2022-43119 affects Clansphere CMS v2011.4. It provides a cross-site scripting vulnerability via the Username parameter, allowing attackers to inject arbitrary web scripts/HTML. Root cause appears to be unsanitized/unchecked input in Username, with impact of script execution in the browser. CV...

sphere 跨站脚本漏洞

OpenSourceCMS.com Clansphere CMS is an OpenSourceCMS.com open source application. Provides a CMS framework for building websites. A cross-site scripting vulnerability exists in Clansphere CMS v2011.4. An attacker can exploit this vulnerability to execute arbitrary web script or HTML via a special...

Clansphere cross-site scripting vulnerability (CNVD-2021-22962)

ClanSphere is a modular Web-CMS. A cross-site scripting vulnerability exists in Clansphere 2011.4. The vulnerability can be exploited to inject JavaScript via the "language" parameter...

Clansphere Cross-Site Scripting Vulnerability

ClanSphere is a modular Web-CMS. A cross-site scripting vulnerability exists in Clansphere 2011.4. The vulnerability can be exploited to inject JavaScript via the "module" parameter...

CVE-2021-27310

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter...

CVE-2021-27309

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter...

CVE-2021-27310

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter...

CVE-2021-27309

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter...

Design/Logic Flaw

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter...

Cross site scripting

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter...

CVE-2021-27309

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter...

CVE-2021-27309

Clansphere CMS 2011.4 is affected by an unauthenticated reflected Cross‑Site Scripting vulnerability via the "module" parameter. Exploitation could execute arbitrary JavaScript in the victim’s browser, potentially enabling session hijacking, defacement, or information theft. Remediation is to upg...

CVE-2021-27310

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter...

CVE-2021-27310

Clansphere CMS 2011.4 is affected by an unauthenticated reflected XSS vulnerability in the language parameter. The Nuclei template confirms unauthenticated reflected XSS, with impact described as enabling arbitrary JavaScript execution in the victim’s browser (session hijacking/defacement as per ...

OpenSourceCMS.com Clansphere CMS 跨站脚本漏洞

ClanSphere is a modular Web-CMS. A cross-site scripting vulnerability exists in Clansphere 2011.4. The vulnerability can be exploited to inject JavaScript via the "language" parameter...

CVE-2021-27309: Improper Neutralization of Input During Web Page Generation

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter...

OpenSourceCMS.com Clansphere CMS 跨站脚本漏洞

ClanSphere is a modular Web-CMS. A cross-site scripting vulnerability exists in Clansphere 2011.4. The vulnerability can be exploited to inject JavaScript via the "module" parameter...

CVE-2021-27310: Improper Neutralization of Input During Web Page Generation

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter...

File Upload Vulnerability in ClanSphere

ClanSphere is a web content management system primarily used for building tribal and eSports websites. ClanSphere suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

Arbitrary File Deletion Vulnerability in ClanSphere

ClanSphere is a web content management system primarily used for building tribal and eSports websites. ClanSphere suffers from an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...