Approved changes feed: RSS · Atom

cpe:2.3:a:csphere:clansphere:2008.0:*:*:*:*:*:*:*

part: a version: 2008.0 update: *

VendorCsphere (60d475fa-14fe-54e5-9f11-655047bd3b7a)
ProductClansphere (d57dbc3e-941b-565f-877b-fa6316a99ce5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/clansphere/clansphere purl2cpe 2026-06-01 10:12:38.813458
pkg:sourceforge/clansphere purl2cpe 2026-06-01 10:12:38.813460

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-1865 vulnerable 2026-06-08 04:54:10.812694 Details available
Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the IP address to the cs_getip function in generate.php in the Captcha module, or (2) the s_email parameter to the cs_sql_select function in the MySQL database driver (mysql.php).
Published: 2010-05-07T22:00:00.000Z
Updated: 2024-08-07T01:35:53.695Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.