Skip to content
OpenAdvisories

Product · ClanSphere Project

ClanSphere

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.7
    CVE-2012-10034 Public exploit

    ClanSphere 2011.3 Local File Inclusion via cs_lang Cookie

    ClanSphere 2011.3 is vulnerable to a local file inclusion (LFI) flaw due to improper handling of the cs_lang cookie parameter. The application fails to sanitize user-supplied input, allowing attackers to traverse directories and read arbitrary files outside t…