PT-2008-3427 · Carbon · Carbon Communities

Published 2008-04-21 · Updated 2018-10-11 · CVE-2008-1900

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Carbon Communities versions 2.4 and earlier

Description The issue allows remote attackers to edit arbitrary member information. This is achieved by modifying the ID field in the option Update.asp page.

Recommendations For Carbon Communities versions 2.4 and earlier, restrict access to the option Update.asp page to prevent unauthorized modifications to member information. Consider implementing input validation and sanitization for the ID field to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2008-1900

Affected Products

Carbon Communities

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2008-1900 · Security Note
• http://securityfocus.com/archive/1/490923/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41961 · Note