PT-2009-1940 · Clansphere · Clansphere

Published 2009-03-13 · Updated 2017-08-17 · CVE-2008-6470

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ClanSphere versions prior to 2008.2.1

Description The issue allows remote attackers to obtain sensitive information, and possibly have other unknown impacts, via vectors related to "javascript insert" and the files mods/messages/getusers.php and mods/abcode/listimg.php.

Recommendations For versions prior to 2008.2.1, update to version 2008.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the mods/messages/getusers.php and mods/abcode/listimg.php files until the update is applied.

Fix

Related Identifiers

CVE-2008-6470

Affected Products

Clansphere

References · 9

• http://secunia.com/advisories/31965 · Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=627530 · Patch
• http://clansphere.net/index/news/view/id/289 · Vendor Advisory
• http://clansphere.net/index/news/view/id/306 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-6470 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45269 · Note
• http://osvdb.org/48451 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6470 · Note
• http://securityfocus.com/bid/31293 · Note