ClanSphere Local File Include and Arbitrary File Upload Vulnerabilities
BID:47636
Info
ClanSphere Local File Include and Arbitrary File Upload Vulnerabilities
| Bugtraq ID: | 47636 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Apr 28 2011 12:00AM |
| Updated: | Apr 28 2011 12:00AM |
| Credit: | KedAns-Dz |
| Vulnerable: |
Clansphere Clansphere 2011.0 |
| Not Vulnerable: | |
Discussion
ClanSphere Local File Include and Arbitrary File Upload Vulnerabilities
ClanSphere is prone to a local file-include vulnerability and multiple arbitrary-file-upload vulnerabilities.
An attacker can exploit these issues to upload arbitrary files onto the webserver, execute arbitrary local files within the context of the webserver, and obtain sensitive information.
ClanSphere 2011.0 is vulnerable; other versions may also be affected.
ClanSphere is prone to a local file-include vulnerability and multiple arbitrary-file-upload vulnerabilities.
An attacker can exploit these issues to upload arbitrary files onto the webserver, execute arbitrary local files within the context of the webserver, and obtain sensitive information.
ClanSphere 2011.0 is vulnerable; other versions may also be affected.
Solution / Fix
ClanSphere Local File Include and Arbitrary File Upload Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
ClanSphere Local File Include and Arbitrary File Upload Vulnerabilities
References:
References:
- ClanSphere Homepage (ClanSphere)