ClanSphere Multiple SQL Injection Vulnerabilities
BID:35576
Info
ClanSphere Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 35576 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 05 2009 12:00AM |
| Updated: | Jul 08 2009 08:16PM |
| Credit: | The vendor. |
| Vulnerable: |
Clansphere Clansphere 2009.0 |
| Not Vulnerable: |
Clansphere Clansphere 2009.0.1 |
Discussion
ClanSphere Multiple SQL Injection Vulnerabilities
ClanSphere is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to ClanSphere 2009.0.1 are affected.
ClanSphere is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Versions prior to ClanSphere 2009.0.1 are affected.
Exploit / POC
ClanSphere Multiple SQL Injection Vulnerabilities
Attackers can use a browser to exploit these issues.
Attackers can use a browser to exploit these issues.
Solution / Fix
ClanSphere Multiple SQL Injection Vulnerabilities
Solution:
The vendor has released updates. Please see the references for details.
Clansphere Clansphere 2009.0
Solution:
The vendor has released updates. Please see the references for details.
Clansphere Clansphere 2009.0
-
Clansphere clansphere_2009.0.1.zip
https://sourceforge.net/projects/clansphere/files/ClanSphere%20Full/cl ansphere_2009.0.1.zip
References
ClanSphere Multiple SQL Injection Vulnerabilities
References:
References:
- ClanSphere 2009.0.1 (ClanSphere)
- ClanSphere Homepage (ClanSphere)