Unscored CVE-2014-100010 EUVD-2014-1041GHSA-7mcw-2h2h-r55h

Cross-site scripting (XSS) vulnerability in ClanSphere 2011.4 allows remote attackers to inject arbitrary web script or HTML via the where …

Published Jan 13, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in ClanSphere 2011.4 allows remote attackers to inject arbitrary web script or HTML via the where parameter in a list action to index.php.

References

20140310 [HTTPCS] ClanSphere 'where' Cross Site Scripting Vulnerability mailing-list
https://www.httpcs.com/advisory/httpcs127
57306 third-party-advisory
20140307 [HTTPCS] ClanSphere 'where' Cross Site Scripting Vulnerability mailing-list
66058 vdb-entry