Vendors / Carbon Communities Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Carbon Communities records in CISA KEV No Carbon Communities vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
CarbonCommunities stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for DataBase/Carbon2.4d.m…
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01612 · Published 2007-01-05 · No fix listed
Priority LOW 35
option_Update.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary member information via a modified ID field.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01187 · Published 2008-04-21 · No fix listed
Open these records in search → All records by CVSS severity
0 2 0 0 0
