Remote Code Execution in Carbon Communities Product by Carbon Project
CVE-2008-1900

Currently unrated

Key Information:

Vendor: Carbon Communities
Status: Carbon Communities
Vendor: CVE Published:; 22 April 2008

🔔 Create Carbon Communities Vulnerability Alert

What is CVE-2008-1900?

The option_Update.asp script within Carbon Communities version 2.4 and earlier is susceptible to unauthorized modifications, allowing remote attackers to alter member data by exploiting a manipulated ID field. This flaw can lead to significant security breaches, as attackers could potentially modify sensitive user information without proper authentication.

References

http://www.securityfocus.com/archive/1/490923/100/0/threaded

mailing-listx_refsource_BUGTRAQ

https://exchange.xforce.ibmcloud.com/vulnerabilities/41961

vdb-entryx_refsource_XF

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 22, 2008
Vulnerability Reserved
Apr 18, 2008

CVE-2008-1900 Data

JSON