ClanSphere Local File Inclusion Vulnerability

A local file inclusion vulnerability has been identified in ClanSphere version 2011.3. This issue arises from improper handling of the 'cs_lang' cookie parameter, which allows directory traversal and the reading of arbitrary files outside the web root. The vulnerability can be exploited by injecting null bytes to bypass file extension checks.

Impact

Exploitation of this vulnerability allows for local file inclusion, which could lead to unauthorized access to sensitive files on the server. Additionally, according to VulnCheck, this vulnerability could be exploited to execute a reverse shell.

Reproduction

The vulnerability can be reproduced by sending a crafted request that includes a 'cs_lang' cookie with a payload designed to traverse directories and access files outside the web root. This can be done using a tool like curl or through a Metasploit module available in the Metasploit Framework.