CVE-2014-100010

Description

References

• seclists.org/fulldisclosure/2014/Mar/73
• secunia.com/advisories/57306
• securityfocus.com/archive/1/531373/100/0/threaded
• securityfocus.com/bid/66058
• httpcs.com/advisory/httpcs127

Weitere Schwachstellen in clansphere

• CVE-2012-10034HOCH 7.5ClanSphere 2011.3 is vulnerable to a local file inclusion (LFI) flaw due to improper handling of the cs_lang cookie parameter. The applicati…
• CVE-2022-43119MITTEL 6.1A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts or HTML via a crafted…
• CVE-2021-27310MITTEL 6.1Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter.
• CVE-2021-27309MITTEL 6.1Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter.
• CVE-2011-3714MITTEL 5.0ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installatio…