CVE-2012-10034

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

ClanSphere 2011.3 is vulnerable to a local file inclusion (LFI) flaw due to improper handling of the cs_lang cookie parameter. The application fails to sanitize user-supplied input, allowing attackers to traverse directories and read arbitrary files outside the web root. The vulnerability is further exacerbated by null byte injection (%00) to bypass file extension checks.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
ClanSphere Project	ClanSphere	2011.3

References

https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/clansphere_traversal.rbExploit, Third Party Advisory
https://sourceforge.net/projects/clansphere/Product
https://www.exploit-db.com/exploits/22181Exploit, VDB Entry
https://www.vulncheck.com/advisories/clansphere-local-file-inclusion-via-cookieThird Party Advisory
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/clansphere_traversal.rbExploit, Third Party Advisory
https://www.exploit-db.com/exploits/22181Exploit, VDB Entry

Timeline

Published: Aug 5, 2025
Last modified: Jun 16, 2026
NVD status: Analyzed

Related CVEs from 2012

CVE-2012-1003510.0Turbo FTP Server versions 1.30.823 and 1.30.826 contain a buffer overflow vulnerability in the handling of the PORT command. By sending a sp CVE-2012-100369.3Project Pier 0.8.8 and earlier contains an unauthenticated arbitrary file upload vulnerability in tools/upload_file.php. The upload handler CVE-2012-100379.3PhpTax version 0.8 contains a remote code execution vulnerability in drawimage.php. The pfilez GET parameter is unsafely passed to the exec(CVE-2012-100389.3Auxilium RateMyPet contains an unauthenticated arbitrary file upload vulnerability in upload_banners.php. The banner upload feature fails to CVE-2012-100399.4ZEN Load Balancer versions 2.0 and 3.0-rc1 contain a command injection vulnerability in content2-2.cgi. The filelog parameter is passed dire CVE-2012-10042.1Multiple cross-site scripting (XSS) vulnerabilities in UI/Register.pm in Foswiki before 1.1.5 allow remote authenticated users with CHANGE p CVE-2012-100409.4Openfiler v2.x contains a command injection vulnerability in the system.html page. The device parameter is used to instantiate a NetworkCard CVE-2012-100419.3WAN Emulator v2.3 contains two unauthenticated command execution vulnerabilities. The result.php script calls shell_exec() with unsanitized CVE-2012-100428.7Sflog! CMS 1.0 contains an authenticated arbitrary file upload vulnerability in the blog management interface. The application ships with de CVE-2012-100439.3A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality CVE-2012-1004410.0MobileCartly version 1.0 contains an arbitrary file creation vulnerability in the savepage.php script. The application fails to perform auth CVE-2012-100459.3XODA version 0.4.5 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary PHP code on the s