CVE-2008-1896

Multiple cross-site scripting (XSS) vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Redirect parameter to login.asp and the (2) OrderBy parameter to member_send.asp.

Link	Resource
http://bugreport.ir/index.php?/35	Exploit
http://www.securityfocus.com/bid/28806	Exploit
http://secunia.com/advisories/29827	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41846
https://www.exploit-db.com/exploits/5456
http://www.securityfocus.com/archive/1/490923/100/0/threaded

Configuration 1

cpe:2.3:a:carboncommunities:carbon_communities:2.3:*:*:*:*:*:*:* cpe:2.3:a:carboncommunities:carbon_communities:1.0:*:*:*:*:*:*:* cpe:2.3:a:carboncommunities:carbon_communities:*:*:*:*:*:*:*:* cpe:2.3:a:carboncommunities:carbon_communities:1.1:*:*:*:*:*:*:* cpe:2.3:a:carboncommunities:carbon_communities:2.1:*:*:*:*:*:*:* cpe:2.3:a:carboncommunities:carbon_communities:2.2:*:*:*:*:*:*:*

---

Published : 2008-04-18 10:05

Updated : 2018-10-11 08:37

---

NVD link : CVE-2008-1896

Mitre link : CVE-2008-1896

No products.

CWE-79