Information Disclosure Vulnerability in Carbon Communities by Carbon Communities
CVE-2007-0096

Currently unrated

Key Information:

Vendor: Carbon Communities
Status: Carbon Communities
Vendor: CVE Published:; 5 January 2007

🔔 Create Carbon Communities Vulnerability Alert

What is CVE-2007-0096?

The information disclosure vulnerability in Carbon Communities arises from improper access control, allowing remote attackers to gain unauthorized access to sensitive data. This flaw permits attackers to directly request and download the database file (DataBase/Carbon2.4d.mdb), which contains private information such as user passwords stored without sufficient security measures. This vulnerability poses a significant risk as it exposes critical personal data to unauthorized individuals, potentially leading to account takeovers and further exploitation.

References

http://aria-security.com/forum/showthread.php?t=85

x_refsource_MISC

http://osvdb.org/37549

vdb-entryx_refsource_OSVDB

https://exchange.xforce.ibmcloud.com/vulnerabilities/31253

vdb-entryx_refsource_XF

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 5, 2007
Vulnerability Reserved
Jan 5, 2007

CVE-2007-0096 Data

JSON