CVEvulnerability
CVE-2008-1896
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-04-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Redirect parameter to login.asp and the (2) OrderBy parameter to member_send.asp.
Affected configurations
• carboncommunities carbon communities (<= 2.4)
• carboncommunities carbon communities 1.0
• carboncommunities carbon communities 1.1
• carboncommunities carbon communities 2.1
• carboncommunities carbon communities 2.2
• carboncommunities carbon communities 2.3
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://bugreport.ir/index.php?/35 Exploit
- http://secunia.com/advisories/29827 Vendor Advisory
- http://www.securityfocus.com/archive/1/490923/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28806 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41846 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5456 www.exploit-db.com
- http://bugreport.ir/index.php?/35 Exploit
- http://secunia.com/advisories/29827 Vendor Advisory
- http://www.securityfocus.com/archive/1/490923/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28806 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41846 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5456 www.exploit-db.com