CVE-2008-1896

MEDIUM 4.3CVE-2008-1896 · Published 18/04/2008 · updated 16/06/2026

In short

CVE-2008-1896 is a MEDIUM (CVSS 4.3) vulnerability affecting carbon communities (carboncommunities).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
carbon communities carboncommunities	`= 1.0= 1.1= 2.1= 2.2= 2.3≤ 2.4`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Redirect parameter to login.asp and the (2) OrderBy parameter to member_send.asp.

References

bugreport.ir/index.php · Exploit
secunia.com/advisories/29827 · Vendor Advisory
securityfocus.com/archive/1/490923/100/0/threaded
securityfocus.com/bid/28806 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/41846
exploit-db.com/exploits/5456

More vulnerabilities in carbon communities

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free