Csphere

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Csphere records in CISA KEV

No Csphere vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Clansphere 7 records HIGH

Records

7 records in Clansphere · all components

TI-2012-05457 CVE-2012-10034 · GHSA-4m36-5v2m-v77q

ClanSphere 2011.3 Local File Inclusion via cs_lang Cookie

HIGH 77

ClanSphere 2011.3 is vulnerable to a local file inclusion (LFI) flaw due to improper handling of the cs_lang cookie parameter.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.02261 Published 2025-08-05 No fix listed CWE-22

TI-2022-21041 CVE-2022-43119 · GHSA-8vw4-w62x-p8mx

A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to…

MEDIUM 60

A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00593 Published 2022-11-09 No fix listed CWE-79

TI-2010-01784 CVE-2010-1865 · GHSA-vhj4-xvq7-8jwv

Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote…

LOW 36

Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the IP address to the cs_getip function in generate.php in the Captcha module, or…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01747 Published 2010-05-07 No fix listed CWE-89

TI-2021-08831 CVE-2021-27310 · GHSA-gwcx-pjgx-wqm5

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter.

LOW 32

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02816 Published 2021-03-23 No fix listed CWE-79

TI-2021-08830 CVE-2021-27309 · GHSA-9mpw-pcw7-gq3g

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter.

LOW 31

Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01969 Published 2021-03-23 No fix listed CWE-79

TI-2011-03271 CVE-2011-3714 · GHSA-3fgg-mcf6-vq27

ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct…

LOW 26

ClanSphere 2010.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by mods/board/attachment.php.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01335 Published 2011-09-23 No fix listed CWE-200

TI-2014-08274 CVE-2014-100010 · GHSA-7mcw-2h2h-r55h

Cross-site scripting (XSS) vulnerability in ClanSphere 2011.4 allows remote attackers to…

LOW 22

Cross-site scripting (XSS) vulnerability in ClanSphere 2011.4 allows remote attackers to inject arbitrary web script or HTML via the where parameter in a list action to index.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01161 Published 2015-01-13 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	5
Low	0
No CVSS	0