← Back

Carbon Communities

carbon_communities

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Carbon Communities
carbon_communities
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-1900
1Carbon Communities
1Carbon Communities
Apr 23, 2026
Apr 22, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
option_Update.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary member information via a modified ID field.
CVE-2007-0096
1Carbon Communities
1Carbon Communities
Apr 23, 2026
Jan 5, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
CarbonCommunities stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for DataBase/Carbon2.4d.m...Show more
CarbonCommunities stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for DataBase/Carbon2.4d.mdb.Show less