CVE-2008-1900

Carbon Communities 2.4 and earlier are affected by CVE-2008-1900 via the option_Update.asp component. The root cause is that a modified ID field allows remote attackers to edit arbitrary member information. The impact is remote modification of member data. The connected documents do not provide e...