4.3
CVSSv2

CVE-2005-1076

Published: 02/05/2005 Updated: 05/09/2008
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remote malicious users to inject arbitrary web script or HTML via the message field.

Vulnerable Product Search on Vulmon Subscribe to Product

webct webct campus_4.1

Exploits

source: wwwsecurityfocuscom/bid/13101/info WebCT is reportedly affected by an HTML injection vulnerability This issue is due to a failure in the application to properly sanitize user-supplied input prior to using it in dynamically generated content Attacker-supplied HTML and script code would be able to access properties of the site, p ...