CVE-2021-36747

CVE-2021-36747 Blackboard Learn 9.1 तक के संस्करण में एक प्रमाणित उपयोगकर्ता द्वारा Feedback to Learner फॉर्म के माध्यम से XSS संभव है। खोजा गया: 11 मई, 2018 Blackboard सुरक्षा टीम को इस समस्या के बारे में सूचित किया गया है। उन्होंने 14 मई, 2018 को इस भेद्यता को स्वीकार किया। विवरण: K-12 और उच्च...

CVE-2018-13257

انتحال رأس المضيف لتذكرة CAS في Blackboard Learn وحدة مصادقة داخل Blackboard Learn معرّضة لانتحال رأس مضيف HTTP أثناء التحقق من تذكرة الخدمة الخاصة بخدمة المصادقة المركزية CAS. تذكرة خدمة CAS مخصصة لـ خدمة محددة فقط، لكن Blackboard Learn لا يتحقق بشكل صحيح من أن هذه الخدمة هي المثيل الحالي. يتيح...

CVE-2022-39196-

CVE-2022-39196 ترقية الصلاحيات في Black board CMS يسمح Blackboard Learn الإصدار 1.10.1 للمستخدمين المصادق عليهم عن بُعد بقراءة ملفات غير مقصودة عن طريق إدخال بيانات اعتماد الطالب ثم زيارة عنوان URL محدد مباشرةً: webapps/bbcms/execute/. معلومات إضافية root@kitploit: الخطوة 1: استخدم صلاحية بيانات...

EUVD-2018-5206

Malware in sbrugna...

EUVD-2021-23336

Malware in sbrugna...

EUVD-2017-9390

Malware in sbrugna...

EUVD-2021-23337

Malware in sbrugna...

EUVD-2020-29839

Malware in sbrugna...

EUVD-2022-41741

Malicious code in bioql PyPI...

CVE-2022-39196

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Note: The vendor disputes this stating this cannot be reproduced...

CVE-2021-36747

Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form...

CVE-2021-36746

Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor...

CVE-2020-9008

Stored Cross-site scripting XSS vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tile widget in the People Tool profile editor...

CVE-2018-13257

The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation, enabling a phishing attack from the CAS server login page...

Blackboard Learn 安全漏洞

Blackboard Learn is a learning management system from Blackboard, Inc. A security vulnerability exists in Blackboard Learn version 2.0.0.2 and earlier, which stems from an arbitrary file upload vulnerability in the UserSusername.BlackBoard component that allows an attacker to execute arbitrary co...

CVE-2022-39196

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Note: The vendor disputes this stating this cannot be reproduced...

CVE-2022-39196

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Note: The vendor disputes this stating this cannot be reproduced...

CVE-2022-39196

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Note: The vendor disputes this stating this cannot be reproduced...

Design/Logic Flaw

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL...

CVE-2022-39196

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Note: The vendor disputes this stating this cannot be reproduced...