Cross site scripting

Cross-site scripting XSS vulnerability in ClanSphere 2011.4 allows remote attackers to inject arbitrary web script or HTML via the where parameter in a list action to index.php...

CVE-2014-100010

Cross-site scripting XSS vulnerability in ClanSphere 2011.4 allows remote attackers to inject arbitrary web script or HTML via the where parameter in a list action to index.php...

CVE-2014-100010

ClanSphere 2011.4 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the where parameter in a list action to index.php. The vulnerability is supported by multiple sources (NVD and OpenVAS) with a CVSS v2 base score of ...

ClanSphere 2010 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Clansphere Multiple vulnerabilities Date: 24/08/2010 Author: Sweet Contact : [email protected] Software Link: Download:http: http://sourceforge.net/projects/clansphere/ Version: all Tested on: WinXp sp3 Risk : H...

ClanSphere 2007.4.4 'install.php' Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27471/info ClanSphere is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to access...

ClanSphere 2009 'text' Parameter Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35605/info ClanSphere is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

ClanSphere 2011.3 (cs_lang cookie parameter) Local File Inclusion

No description provided by source. Exploit Title: ClanSphere 2011.3 cslang cookie parameter Local File Include Vulnerability Google Dork: Copyright 2012 Seitentitel. All rights reserved. || inurl:index.php?mod=clansphere Date: 10/22/2012 Author: Marco Tulio blkhtc0rp Vendor Homepage:...

CLANSPHERE 2010.0 Final Multiple Vulnerabilities

No description provided by source. Vulnerability ID: HTB22694 Reference: http://www.htbridge.ch/advisory/sqlinjectioninclansphere.html Product: CLANSPHERE Vendor: csphere.eu http://www.csphere.eu/ Vulnerable Version: 2010.0 Final Vendor Notification: 02 November 2010 Vulnerability Type: SQL...

[HTTPCS] ClanSphere 'where' Cross Site Scripting Vulnerability

HTTPCS Advisory : HTTPCS127 Product : ClanSphere Version : 2011.4 Date : 2014-03-07 Criticality level : Less Critical Description : A vulnerability has been discovered in ClanSphere, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed via the 'where'...

ClanSphere "where"跨站脚本漏洞

ClanSphere是一个高级Web内容管理系统，主要用于搭建部落和电子竞技类网站。 由于通过"where" GET参数传递到index.php 当"mod"设置为"users"的输入在返回用户前没有正确过滤，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 0 ClanSphere 2011.4.3 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.csphere.eu/...

ClanSphere 2011.4 Cross Site Scripting

HTTPCS Advisory : HTTPCS127 Product : ClanSphere Version : 2011.4 Date : 2014-03-07 Criticality level : Less Critical Description : A vulnerability has been discovered in ClanSphere, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed via the 'where'...

ClanSphere 2011.3 Local File Inclusion Vulnerability

This module exploits a directory traversal flaw found in Clansphere 2011.3. The application fails to handle the cslang parameter properly, which can be used to read any file outside the virtual directory. This module requires Metasploit: https://metasploit.com/download Current source:...

ClanSphere 2011.3 Local File Inclusion / Remote Code Execution

Exploit Title: ClanSphere 2011.3 cslang cookie parameter Local File Inclusion Vulnerability Google Dork: "Copyright 2012 Seitentitel. All rights reserved." || inurl:index.php?mod=clansphere Date: 10/24/2012 Author: Marco Tulio blkhtc0rp Vendor Homepage: http://www.csphere.eu Version: 2011.3 Teste...

ClanSphere 2011.3 Local File Inclusion / Remote Code Execution Vulnerabilities

ClanSphere version 2011.3 suffers from a local file inclusion vulnerability in the cslang cookie parameter. This advisory has two exploits included and one of them uses /proc/self/environ to launch a connect-back shell. Exploit Title: ClanSphere 2011.3 cslang cookie parameter Local File Inclusion...

ClanSphere 2011.3 - cs_lang Cookie Local File Inclusion

ClanSphere 2011.3 - cslang Cookie Local File Inclusion Exploit Title: ClanSphere 2011.3 cslang cookie parameter Local File Include Vulnerability Google Dork: "Copyright 2012 Seitentitel. All rights reserved." || inurl:index.php?mod=clansphere Date: 10/22/2012 Author: Marco Tulio blkhtc0rp Vendor...

ClanSphere 2011.3 - 'cs_lang' Cookie Local File Inclusion

Exploit Title: ClanSphere 2011.3 cslang cookie parameter Local File Include Vulnerability Google Dork: "Copyright 2012 Seitentitel. All rights reserved." || inurl:index.php?mod=clansphere Date: 10/22/2012 Author: Marco Tulio blkhtc0rp Vendor Homepage: http://www.csphere.eu Version: 2011.3 Tested...

CVE-2011-3714

ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by mods/board/attachment.php...

Design/Logic Flaw

ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by mods/board/attachment.php...

CVE-2011-3714

ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by mods/board/attachment.php...

CVE-2011-3714

CVE-2011-3714 affects ClanSphere 2010.0. The vulnerability allows remote attackers to obtain sensitive information through a direct request to a .php file (mods/board/attachment.php), causing an error message that reveals the installation path. The provided sources describe this path disclosure, ...