CVE

Id
32013  
CVE No.
CVE-2008-1896  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Redirect parameter to login.asp and the (2) OrderBy parameter to member_send.asp.  
Phase
Assigned (20080418)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
345334 32013 CVE-2008-1896 BUGTRAQ:20080416 Carbon Communities forum Multiple Vulnerabilities.  View
345335 32013 CVE-2008-1896 URL:http://www.securityfocus.com/archive/1/archive/1/490923/100/0/threaded  View
345336 32013 CVE-2008-1896 MILW0RM:5456  View
345337 32013 CVE-2008-1896 URL:http://www.milw0rm.com/exploits/5456  View
345338 32013 CVE-2008-1896 MISC:http://bugreport.ir/index.php?/35  View
345339 32013 CVE-2008-1896 BID:28806  View
345340 32013 CVE-2008-1896 URL:http://www.securityfocus.com/bid/28806  View
345341 32013 CVE-2008-1896 SECUNIA:29827  View
345342 32013 CVE-2008-1896 URL:http://secunia.com/advisories/29827  View
345343 32013 CVE-2008-1896 XF:carboncommunities-login-membersend-xss(41846)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47661 JVNDB-2008-002971 Carbon Communities の option_Update.asp における任意のメンバ情報を編集される脆弱性 Carbon Communities の option_Update.asp には、任意のメンバ情報を編集される脆弱性が存在します。 CVE-2008-1900 32013 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002971.html  View