CVE-2008-1900: Carbon Communities

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

option_Update.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary member information via a modified ID field.

Affected products

• Carbon Communities Carbon Communities: up to and including 2.4

Published 2008-04-22. Last modified 2026-06-16.