Carbon Communities 2.4 - Multiple Vulnerabilities

Carbon Communities 2.4 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Multiple Vulnerabilities in Carbon Communities forum. Vendor: www.carboncommunities.com Vulnerable Version: 2.4 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

CVE-2007-0096

CarbonCommunities stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for DataBase/Carbon2.4d.mdb...

CVE-2007-0096

CarbonCommunities stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for DataBase/Carbon2.4d.mdb...

CVE-2007-0096

The CVE-2007-0096 issue affects CarbonCommunities, where sensitive data is stored under the web root with inadequate access control. This allows remote attackers to download a database (DataBase/Carbon2.4d.mdb) via a direct request. The available sources describe the vulnerability in terms of imp...