Carbon Communities

carbon_communities

Vendor: Carbon Communities • 2 CVEs

CVEs (2)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2008-1900

1Carbon Communities

Apr 23, 2026

Apr 22, 2008

N/A· v4

N/A· v3

7.5 HIGH· v2

option_Update.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary member information via a modified ID field.

CVE-2007-0096

1Carbon Communities

Apr 23, 2026

Jan 5, 2007

N/A· v4

N/A· v3

7.5 HIGH· v2

CarbonCommunities stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for DataBase/Carbon2.4d.m...Show more