144 matches found
Clansphere CMS 2011.4 - Cross-Site Scripting
Clansphere CMS 2011.4 contains an unauthenticated reflected cross-site scripting vulnerability via the "module" parameter. id: CVE-2021-27309 info: name: Clansphere CMS 2011.4 - Cross-Site Scripting author: edoardottt severity: medium description: | Clansphere CMS 2011.4 contains an unauthenticat...
Clansphere CMS 2011.4 - Cross-Site Scripting
Clansphere CMS 2011.4 contains an unauthenticated reflected cross-site scripting vulnerability via the "language" parameter. id: CVE-2021-27310 info: name: Clansphere CMS 2011.4 - Cross-Site Scripting author: alph4byt3 severity: medium description: Clansphere CMS 2011.4 contains an unauthenticate...
CVE-2021-27309
Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter...
CVE-2021-27310
Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter...
EUVD-2021-14071
Malware in sbrugna...
EUVD-2012-6579
Malware in sbrugna...
EUVD-2009-2433
Malware in sbrugna...
EUVD-2008-6440
Malware in sbrugna...
EUVD-2010-1885
Malware in sbrugna...
EUVD-2008-1403
Malware in sbrugna...
EUVD-2014-1041
Malware in sbrugna...
EUVD-2021-14070
Malware in sbrugna...
EUVD-2009-2341
Malware in sbrugna...
EUVD-2011-3672
Malware in sbrugna...
EUVD-2008-0499
Malware in sbrugna...
EUVD-2007-5042
Malware in sbrugna...
EUVD-2022-46168
Malicious code in bioql PyPI...
CVE-2012-10034
ClanSphere 2011.3 is vulnerable to a local file inclusion LFI flaw due to improper handling of the cslang cookie parameter. The application fails to sanitize user-supplied input, allowing attackers to traverse directories and read arbitrary files outside the web root. The vulnerability is further...
CVE-2012-10034
ClanSphere 2011.3 is vulnerable to a local file inclusion LFI flaw due to improper handling of the cslang cookie parameter. The application fails to sanitize user-supplied input, allowing attackers to traverse directories and read arbitrary files outside the web root. The vulnerability is further...
CVE-2012-10034
CVE-2012-10034 affects ClanSphere 2011.3 with a local file inclusion (LFI) flaw caused by improper handling of the cs_lang cookie parameter; unsanitized input enables directory traversal and reading files outside the web root, with null byte (%00) injection to bypass file extension checks. Public...