Published: 15/04/2008 Updated: 11/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and previous versions, and possibly some 8.0 versions, allow remote malicious users to inject arbitrary web script or HTML via (1) the searchText parameter in a Course action to webapps/blackboard/execute/viewCatalog or (2) the data__announcements___pk1_pk2__subject parameter in an ADD action to bin/common/announcement.pl.

Vulnerable Product	Search on Vulmon	Subscribe to Product
blackboard academic suite

source: wwwsecurityfocuscom/bid/28455/info Blackboard Academic Suite is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected ...

source: wwwsecurityfocuscom/bid/28455/info Blackboard Academic Suite is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affect ...

CWE-79 http://secskill.wordpress.com/2008/03/27/hacking-blackboard-academic-suite-2/http://www.scribd.com/doc/2363025/Hacking-Blackboard-Academic-Suite http://www.securityfocus.com/bid/28455 http://www.securitytracker.com/id?1019710 http://secunia.com/advisories/29543 http://securityreason.com/securityalert/3810 https://exchange.xforce.ibmcloud.com/vulnerabilities/41478 http://www.securityfocus.com/archive/1/490096/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/31537/

CVE-2008-1795

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect