PT-2009-1940 · Clansphere · Clansphere

Publicado 2009-03-13 · Atualizado 2017-08-17 · CVE-2008-6470

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ClanSphere versions prior to 2008.2.1

Description The issue allows remote attackers to obtain sensitive information, and possibly have other unknown impacts, via vectors related to "javascript insert" and the files mods/messages/getusers.php and mods/abcode/listimg.php.

Recommendations For versions prior to 2008.2.1, update to version 2008.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the mods/messages/getusers.php and mods/abcode/listimg.php files until the update is applied.

Correção

Identificadores relacionados

CVE-2008-6470

Produtos afetados

Clansphere

Referências · 9

• https://exchange.xforce.ibmcloud.com/vulnerabilities/45269 · Nota
• http://secunia.com/advisories/31965 · Aviso do Fabricante
• http://osvdb.org/48451 · Nota
• http://sourceforge.net/project/shownotes.php?release_id=627530 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6470 · Nota
• http://clansphere.net/index/news/view/id/289 · Aviso do Fabricante
• http://clansphere.net/index/news/view/id/306 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-6470 · Nota de Segurança
• http://securityfocus.com/bid/31293 · Nota