ClanSphere XSS Vulnerability

Exploit for php platform in category web applications ============================ ClanSphere XSS Vulnerability ============================ Script : csphere http://www.csphere.eu/ Download : http://www.csphere.eu/index/files Vulnerable File index.php?mod=awards&action=list&start=0&sort=3 SQL XpL...

MOPS-2010-004: ClanSphere Captcha Generator Blind SQL Injection Vulnerability

MOPS-2010-004: ClanSphere Captcha Generator Blind SQL Injection Vulnerability May 3rd, 2010 A SQL Injection vulnerability was discovered in the Captcha generator of ClanSphere that allows retrieving all the data from the database. Affected versions Affected is ClanSphere = 2009.0.3 Credits The...

MOPS-2010-005: ClanSphere MySQL Driver Generic SQL Injection Vulnerability

MOPS-2010-005: ClanSphere MySQL Driver Generic SQL Injection Vulnerability May 3rd, 2010 A generic SQL Injection vulnerability was discovered in the MySQL Driver of ClanSphere that allows exploiting a lot of otherwise safe SQL queries. Affected versions Affected is ClanSphere = 2009.0.3 Credits T...

CVE-2010-1865

Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the IP address to the csgetip function in generate.php in the Captcha module, or 2 the semail parameter to the cssqlselect function in the MySQL database driver...

Sql injection

Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the IP address to the csgetip function in generate.php in the Captcha module, or 2 the semail parameter to the cssqlselect function in the MySQL database driver...

CVE-2010-1865

CVE-2010-1865 describes multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier. The issues allow remote attackers to execute arbitrary SQL commands through (1) the IP address passed to the cs_getip function in generate.php (Captcha module) and (2) the s_email parameter passed t...

CVE-2010-1865

Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the IP address to the csgetip function in generate.php in the Captcha module, or 2 the semail parameter to the cssqlselect function in the MySQL database driver...

CVE-2009-2438

Cross-site scripting XSS vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inject arbitrary web script or HTML via the text parameter in a list action. NOTE: this might overlap CVE-2008-1399...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inject arbitrary web script or HTML via the text parameter in a list action. NOTE: this might overlap CVE-2008-1399...

CVE-2009-2438

CVE-2009-2438 describes a cross-site scripting (XSS) vulnerability in ClanSphere, affecting versions 2009.0 and 2009.0.2. The flaw allows remote injection of arbitrary script/HTML via the text parameter in a list action within the search module (index.php). The root cause is an input handling iss...

CVE-2009-2438

Cross-site scripting XSS vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inject arbitrary web script or HTML via the text parameter in a list action. NOTE: this might overlap CVE-2008-1399...

ClanSphere 2009.0 CMS Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + ClanSphere 2009.0 CMS search mod Remote XSS Vulnerability + + Download : http://sourceforge.net/project/showfiles.php?groupid=95430 + + Discovered By...

Sql injection

Multiple SQL injection vulnerabilities in ClanSphere before 2009.0.1 allow remote attackers to execute arbitrary SQL commands via unknown parameters to the gbook module and unspecified other components...

CVE-2009-2345

Multiple SQL injection vulnerabilities in ClanSphere before 2009.0.1 allow remote attackers to execute arbitrary SQL commands via unknown parameters to the gbook module and unspecified other components...

CVE-2009-2345

Multiple SQL injection vulnerabilities in ClanSphere before 2009.0.1 allow remote attackers to execute arbitrary SQL commands via unknown parameters to the gbook module and unspecified other components...

CVE-2009-2345

CVE-2009-2345 concerns Multiple SQL injection vulnerabilities in ClanSphere prior to 2009.0.1. The affected software is ClanSphere; the vulnerable components include the gbook module and unspecified other components. The underlying issue is SQL injection via unknown parameters, allowing remote at...

ClanSphere 2009 - text Cross-Site Scripting

ClanSphere 2009 - text Cross-Site Scripting source: https://www.securityfocus.com/bid/35605/info ClanSphere is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

ClanSphere 2009 - 'text' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35605/info ClanSphere is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

CVE-2008-6470

Multiple unspecified vulnerabilities in ClanSphere before 2008.2.1 allow remote attackers to obtain sensitive information, and possibly have unknown other impact, via vectors related to "javascript insert" and the 1 mods/messages/getusers.php and 2 mods/abcode/listimg.php files. NOTE: some of the...

Information disclosure

Multiple unspecified vulnerabilities in ClanSphere before 2008.2.1 allow remote attackers to obtain sensitive information, and possibly have unknown other impact, via vectors related to "javascript insert" and the 1 mods/messages/getusers.php and 2 mods/abcode/listimg.php files. NOTE: some of the...