CNNVD-202508-378 Information

CNNVD ID

CNNVD-202508-378

CVE-2012-10034

  • CNNVD Published: 2025-08-05

Description (Chinese)

ClanSphere是ClanSphere组织的一个网站内容管理系统。 ClanSphere 2011.3版本存在安全漏洞,该漏洞源于未正确处理cs_lang cookie参数,可能导致本地文件包含。

Description (English)

ClanSphere is a web content management system organized by ClanSphere. ClanSphere version 2011.3 contains a security loophole that stems from an incorrect handling of cs lang cookies parameters, which may lead to local documentation.

Hazard Level

High

Vulnerability Type

其他

Published

2025-08-05

Last Modified

2026-02-24

References

https://sourceforge.net/projects/clansphere/ https://www.exploit-db.com/exploits/22181 https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/ https://www.vulncheck.com/advisories/clansphere-local-file-inclusion-via-cookie https://access.redhat.com/security/cve/cve-2012-10034

Share on: