CVE-2014-100010

NONE EPSS 63.3%

Published Jan 13, 201511y ago · Modified Jun 17, 20262w ago

Published Jan 13, 2015 11y ago

Last Modified Jun 17, 2026 2w ago

Description

Cross-site scripting (XSS) vulnerability in ClanSphere 2011.4 allows remote attackers to inject arbitrary web script or HTML via the where parameter in a list action to index.php.

Threat Intelligence

EPSS Exploit Probability

63.3% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

Vendor	Product	Version	Range
csphere	clansphere	2011.4	any

References 5

seclists.org http://seclists.org/fulldisclosure/2014/Mar/73
secunia.com http://secunia.com/advisories/57306
securityfocus.com http://www.securityfocus.com/archive/1/531373/100/0/threaded
securityfocus.com http://www.securityfocus.com/bid/66058
httpcs.com https://www.httpcs.com/advisory/httpcs127

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.