Multiple vulnerabilities have been identified in ClanSphere, which could be exploited by attackers to gain knowledge of sensitive information or compromise a vulnerable web server. These issues are caused by errors in FCKeditor. For additional information, see : VUPEN/ADV-2009-1799

Affected Products

ClanSphere versions prior to 2009.0.2

Solution

Upgrade to ClanSphere version 2009.0.2 :
http://sourceforge.net/projects/clansphere/files

References

http://www.vupen.com/english/advisories/2009/1813
http://sourceforge.net/project/shownotes.php?release_id=695430

Changelog

2009-07-08 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.