Skip to content
OpenAdvisories

Vendor

ClanSphere Project

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.7
    CVE-2012-10034 Public exploit

    ClanSphere 2011.3 Local File Inclusion via cs_lang Cookie

    ClanSphere 2011.3 is vulnerable to a local file inclusion (LFI) flaw due to improper handling of the cs_lang cookie parameter. The application fails to sanitize user-supplied input, allowing attackers to traverse directories and read arbitrary files outside t…