CVE-2008-1896

CVE-2008-1896 describes multiple cross-site scripting (XSS) vulnerabilities in Carbon Communities versions 2.4 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML through two parameters: (1) Redirect in login.asp and (2) OrderBy in member_send.asp. The consolidat...