Lucene search

[email protected]CVE-2007-5227

HistoryOct 05, 2007 - 11:17 p.m.

CVE-2007-5227

2007-10-0523:17:00

CWE-79

[email protected]

web.nvd.nist.gov

vulnerability

xss

blackboard learning system

remote attack

web script

html

5.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

60.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earlier in BlackBoard Academic Suite allow remote attackers to inject arbitrary web script or HTML via the (1) subject_t and (2) body_text parameters. NOTE: vector 2 requires bypassing a client-side security mechanism that attempts to block XSS sequences.

CPENameOperatorVersion
blackboard:blackboard_learning_and_community_post_systemsblackboard blackboard learning and community post systemseq6.3.1.593

CPE	Name	Operator	Version
blackboard:blackboard_learning_and_community_post_systems	blackboard blackboard learning and community post systems	eq	6.3.1.593

References

osvdb.org/37427

secunia.com/advisories/27005

trew.icenetx.net/toolz/advisory-blackboard-messages-en.txt

www.securityfocus.com/bid/25929

5.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

60.9%

JSON

Related for CVE-2007-5227

prion1