24 matches found
EUVD-2008-1895
Malware in sbrugna...
EUVD-2008-1896
Malware in sbrugna...
EUVD-2008-1900
Malware in sbrugna...
carbon communities <= 2.4 - Multiple Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Multiple Vulnerabilities in Carbon Communities forum. Vendor: www.carboncommunities.com Vulnerable Version: 2.4 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...
CVE-2008-1900
optionUpdate.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary member information via a modified ID field...
CVE-2008-1900
optionUpdate.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary member information via a modified ID field...
CVE-2008-1900
Carbon Communities 2.4 and earlier are affected by CVE-2008-1900 via the option_Update.asp component. The root cause is that a modified ID field allows remote attackers to edit arbitrary member information. The impact is remote modification of member data. The connected documents do not provide e...
CVE-2008-1900: Undefined Security Weakness
optionUpdate.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary member information via a modified ID field...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Redirect parameter to login.asp and the 2 OrderBy parameter to membersend.asp...
Sql injection
Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to events.asp, the 2 UserName parameter to getpassword.asp, and possibly an unspecified parameter to 3 optionUpdate.asp in an edit action...
CVE-2008-1895
Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to events.asp, the 2 UserName parameter to getpassword.asp, and possibly an unspecified parameter to 3 optionUpdate.asp in an edit action...
CVE-2008-1896
Multiple cross-site scripting XSS vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Redirect parameter to login.asp and the 2 OrderBy parameter to membersend.asp...
CVE-2008-1896
CVE-2008-1896 describes multiple cross-site scripting (XSS) vulnerabilities in Carbon Communities versions 2.4 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML through two parameters: (1) Redirect in login.asp and (2) OrderBy in member_send.asp. The consolidat...
CVE-2008-1895
CVE-2008-1895 affects Carbon Communities versions
CVE-2008-1896
Multiple cross-site scripting XSS vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Redirect parameter to login.asp and the 2 OrderBy parameter to membersend.asp...
CVE-2008-1895
Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to events.asp, the 2 UserName parameter to getpassword.asp, and possibly an unspecified parameter to 3 optionUpdate.asp in an edit action...
CVE-2008-1895: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to events.asp, the 2 UserName parameter to getpassword.asp, and possibly an unspecified parameter to 3 optionUpdate.asp in an edit action...
CVE-2008-1896: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Redirect parameter to login.asp and the 2 OrderBy parameter to membersend.asp...
Carbon Communities <= 2.4 Multiple Remote Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Multiple Vulnerabilities in Carbon Communities forum. Vendor: www.carboncommunities.com Vulnerable Version: 2.4 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...
Carbon Communities <= 2.4 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ========================================================= Carbon Communities = 2.4 Multiple Remote Vulnerabilities ========================================================= www.BugReport.ir AmnPardaz Security Research Team Title: Multiple...