CVE-2008-1896

Multiple cross-site scripting (XSS) vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Redirect parameter to login.asp and the (2) OrderBy parameter to member_send.asp.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
VendorProductVersion
carboncommunitiescarbon_communities
𝑥
≤ 2.4
carboncommunitiescarbon_communities
1.0
carboncommunitiescarbon_communities
1.1
carboncommunitiescarbon_communities
2.1
carboncommunitiescarbon_communities
2.2
carboncommunitiescarbon_communities
2.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://bugreport.ir/index.php?/35
http://secunia.com/advisories/29827
http://www.securityfocus.com/archive/1/490923/100/0/threaded
http://www.securityfocus.com/bid/28806
https://exchange.xforce.ibmcloud.com/vulnerabilities/41846
https://www.exploit-db.com/exploits/5456
http://bugreport.ir/index.php?/35
http://secunia.com/advisories/29827
http://www.securityfocus.com/archive/1/490923/100/0/threaded
http://www.securityfocus.com/bid/28806
https://exchange.xforce.ibmcloud.com/vulnerabilities/41846
https://www.exploit-db.com/exploits/5456