Clansphere
Csphere · 7 CVEs
ClanSphere 2011.3 Local File Inclusion via cs_lang Cookie
Aug 5, 2025
A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts…
Nov 9, 2022
Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter.
Mar 23, 2021
Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter.
Mar 23, 2021
Cross-site scripting (XSS) vulnerability in ClanSphere 2011.4 allows remote attackers to inject arbitrary web script or…
Jan 13, 2015
ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which re…
Sep 23, 2011
Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary S…
May 7, 2010
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2012-10034 | ClanSphere 2011.3 Local File Inclusion via cs_lang Cookie | HIGH | 1.98% | Aug 5, 2025 |
| CVE-2022-43119 | A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected i… | MEDIUM | 0.50% | Nov 9, 2022 |
| CVE-2021-27309 | Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter. | MEDIUM | 1.97% | Mar 23, 2021 |
| CVE-2021-27310 | Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter. | MEDIUM | 2.82% | Mar 23, 2021 |
| CVE-2014-100010 | Cross-site scripting (XSS) vulnerability in ClanSphere 2011.4 allows remote attackers to inject arbitrary web script or HTML via the where parameter in a list… | MEDIUM | 1.16% | Jan 13, 2015 |
| CVE-2011-3714 | ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error… | MEDIUM | 1.33% | Sep 23, 2011 |
| CVE-2010-1865 | Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the IP address to th… | HIGH | 1.75% | May 7, 2010 |
Showing 1 to 7 of 7 CVEs