CVE-2021-36747

CVE-2021-36747 Blackboard Learn 9.1以前には、認証されたユーザーがFeedback to Learnerフォームを介してXSSを実行できる脆弱性があります。 発見日: 2018年5月11日 この問題はBlackboardセキュリティチームに通知済みです。同チームは2018年5月14日にこの脆弱性を認識しました。 説明:...

CVE-2018-13257

Blackboard Learn CAS チケットホストヘッダースプーフィング Blackboard Learn 内の認証モジュールは、Central Authentication Service CAS の service ticket 検証中に HTTP ホストヘッダースプーフィングの影響を受けます。CAS サービスチケットは特定の service のみを対象としていますが、Blackboard Learn...

CVE-2022-39196-

CVE-2022-39196 Blackboard CMS 権限昇格 Blackboard Learn バージョン 1.10.1 では、リモートの認証済みユーザーが、学生の認証情報を入力してから特定の webapps/bbcms/execute/ URL に直接アクセスすることで、意図しないファイルを読み取ることができます。 追加情報 root@kitploit: ステップ 1: 学生の認証情報権限を使用します。ユーザー名: & パスワード: でログインします。 ステップ 2: "STUDENT" アカウント権限でログインに成功した後。 ステップ 3: その後、"URL / 脆弱性の場所...

EUVD-2018-5206

Malware in sbrugna...

EUVD-2021-23336

Malware in sbrugna...

EUVD-2020-29839

Malware in sbrugna...

EUVD-2021-23337

Malware in sbrugna...

EUVD-2017-9390

Malware in sbrugna...

EUVD-2022-41741

Malicious code in bioql PyPI...

CVE-2022-39196

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Note: The vendor disputes this stating this cannot be reproduced...

CVE-2021-36747

Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form...

CVE-2021-36746

Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor...

CVE-2020-9008

Stored Cross-site scripting XSS vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tile widget in the People Tool profile editor...

CVE-2018-13257

The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation, enabling a phishing attack from the CAS server login page...

Blackboard Learn 安全漏洞

Blackboard Learn is a learning management system from Blackboard, Inc. A security vulnerability exists in Blackboard Learn version 2.0.0.2 and earlier, which stems from an arbitrary file upload vulnerability in the UserSusername.BlackBoard component that allows an attacker to execute arbitrary co...

CVE-2022-39196

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Note: The vendor disputes this stating this cannot be reproduced...

CVE-2022-39196

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Note: The vendor disputes this stating this cannot be reproduced...

CVE-2022-39196

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Note: The vendor disputes this stating this cannot be reproduced...

Design/Logic Flaw

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL...

PT-2022-24797 · Blackboard · Blackboard Learn

Name of the Vulnerable Software and Affected Versions: Blackboard Learn version 1.10.1 Description: The issue allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain "webapps/bbcms/execute/" URL. The vendor disputes this,...