622 matches found
BlackBoard Academic Suite 67 - bincommonannouncement.pl?data__announcements___pk1_pk2__subject Cross-Site Scripting
BlackBoard Academic Suite 67 - bincommonannouncement.pl?dataannouncementspk1pk2subject Cross-Site Scripting source: https://www.securityfocus.com/bid/28455/info Blackboard Academic Suite is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize...
BlackBoard Academic Suite 6/7 - '/bin/common/announcement.pl?data__announcements___pk1_pk2__subject' Cross-Site Scripting
source: https://www.securityfocus.com/bid/28455/info Blackboard Academic Suite is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of...
Cross site scripting
Cross-site scripting XSS vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to inject arbitrary web script or HTML via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0908
SQL injection vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to execute arbitrary SQL commands via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0908
SQL injection vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to execute arbitrary SQL commands via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0909
Cross-site scripting XSS vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to inject arbitrary web script or HTML via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0909
CVE-2008-0909 corresponds to a cross-site scripting (XSS) vulnerability in the SchoolWires Academic Portal. The issue is triggered in the browse.asp endpoint through the c parameter, enabling remote attackers to inject arbitrary web script or HTML. Across connected sources, the core details are c...
CVE-2008-0908
CVE-2008-0908 describes a SQL injection vulnerability in the Schoolwires Academic Portal, specifically in the browse.asp component, exploitable via the c parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, as noted in the description. The origin of the informat...
CVE-2008-0908: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to execute arbitrary SQL commands via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-0909: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to inject arbitrary web script or HTML via the c parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-5227: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earlier in BlackBoard Academic Suite allow remote attackers to inject arbitrary web script or HTML via the 1 subjectt and 2 bodytext parameters. NOTE: vector 2...
Blackboard Academic Suite <= 6.3.1 Build 593 HTML Injection
Binary data 4231.prm...
CVE-2006-3914
Cross-site scripting XSS vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web script by bypassing client-side validation through disabling JavaScript when submitting an essay response, which has no server-side validation before bein...
CVE-2006-3914
Cross-site scripting XSS vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web script by bypassing client-side validation through disabling JavaScript when submitting an essay response, which has no server-side validation before bein...
CVE-2006-3914
The CVE-2006-3914 entry concerns Blackboard Academic Suite 6.2.3.23, where an XSS vulnerability exists due to bypassing client-side JavaScript validation when submitting an essay response. The issue arises because there is no server-side validation before the submitted content is viewed via the G...
CVE-2006-3914: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web script by bypassing client-side validation through disabling JavaScript when submitting an essay response, which has no server-side validation before bein...
Blackboard Academic Suite 6.2.23 +/-: Persistent cross-site scripting vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I. Affected Software Blackboard Academic Suite 6.2.3.23 Prior or newer versions may also be affected. Vendor website: http://www.blackboard.com/ II. Impact Subjective: Severe Objective: Privilege escalation III. Vulnerability There is a...
CVE-2006-0511
Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allows subsequent users to log in as the previous user and gain privileges. NOTE: the vendor has disputed this issue, saying that "This is a customer specific iss...
CVE-2006-0511
Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allows subsequent users to log in as the previous user and gain privileges. NOTE: the vendor has disputed this issue, saying that "This is a customer specific iss...
CVE-2006-0511
Blackboard Academic Suite 6.0 and earlier is affected by a session handling weakness: when a user is idle and then de-authenticates, the system may not properly clear session information, allowing a subsequent user to log in as the previous user and gain privileges. The issue is disputed by the v...