2 matches found
Design/Logic Flaw
optionUpdate.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary member information via a modified ID field...
7.5CVSS7.1AI score0.01187EPSS
SaveExploits0References2Affected Software1
CVE-2008-1900: Undefined Security Weakness
optionUpdate.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary member information via a modified ID field...
7.5CVSS5.9AI score0.01187EPSS
SaveExploits0References1
20