CVE-2006-4308
Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23, and Blackboard Vista 4 allow remote attackers to inject arbitrary Javascript, VBScript, or HTML via (1) data, (2) vbscript, and (3) malformed javascript URIs in various HTML tags when posting to the Discussion Board.
- Score
- CVSS 2.0 4.3 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2006-08-23
- Last modified
- 2024-08-07
- Weaknesses
- CWE-79
Affected products
- Blackboard (Blackboard)
- Blackboard Learning And Community Portal Suite (Blackboard)
- Vista (Blackboard)
References
- http://secunia.com/advisories/21577
- http://securitytracker.com/id?1016735
- http://www.securityfocus.com/archive/1/444062/100/0/threaded
- http://www.securityfocus.com/archive/1/444116/100/0/threaded
- http://www.securityfocus.com/archive/1/444885/100/0/threaded
- http://www.securityfocus.com/bid/19308
- http://www.vupen.com/english/advisories/2006/3366
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28537
