579 matches found
CVE-2008-1225
Multiple cross-site scripting XSS vulnerabilities in WebCT Campus Edition 4.1.5.8, when "Don't wrap text" is enabled, allow remote authenticated users to inject arbitrary web script or HTML via a 1 mail message or 2 discussion board message. NOTE: this might overlap CVE-2005-1076...
WebCT 4.1.5 - Email and Discussion Board Messages HTML Injection
WebCT 4.1.5 - Email and Discussion Board Messages HTML Injection source: https://www.securityfocus.com/bid/28107/info WebCT is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content...
Have to say by the campus network see Network Security status-vulnerability warning-the black bar safety net
Preface originally really do not want to write this article, but really can not let people endure. Did not expect the school campus network security situation is actually so bad, one of the most impressive Willy-nilly. Or administrator of quality and safety awareness. Status of the recall a year...
CVE-2004-2015
CVE-2004-2015 is an XSS vulnerability in WebCT Campus Edition. The issue allows remote attackers to inject arbitrary HTML or web script through iframe, img, or object tags. The available documents confirm the affected product and the vulnerable vectors but do not specify root cause details beyond...
CVE-2004-1872
CVE-2004-1872 affects WebCT Campus Edition 4.1.1.5 and is a Cross-site Scripting (XSS) vulnerability that allows remote injection of arbitrary script/HTML via the @import URL function in a CSS style tag. The NVD CVSS v2 base score is 4.3 (MEDIUM) with network access, no authentication, and partia...
CVE-2004-1935
CVE-2004-1935 describes a cross-site scripting (XSS) vulnerability in SCT Campus Pipeline where remote attackers can inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an email attachment. The NVD metrics indicate the impact is limited to partial integrity...
CVE-2004-2015
Cross-site scripting XSS vulnerability in WebCT Campus Edition allows remote attackers to inject arbitrary HTML or web script via 1 iframe, 2 img, or 3 object tags...
CVE-2004-1935
Cross-site scripting XSS vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an e-mail attachment...
CVE-2005-1076
CVE-2005-1076 describes a cross-site scripting (XSS) vulnerability in the WebCT Campus Edition 4.1 discussion board, allowing an attacker to inject arbitrary script/HTML via the message field. The connected Red Hat and CVE-2008-1225 records corroborate XSS in WebCT 4.1.5.8 and note potential over...
CVE-2005-1076
Cross-site scripting XSS vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remote attackers to inject arbitrary web script or HTML via the message field...
CVE-2004-1593
Cross-site scripting XSS vulnerability in render.UserLayoutRootNode.uP in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via the utf parameter...
CVE-2004-1593
SCT Campus Pipeline is affected by a cross-site scripting (XSS) flaw in render.UserLayoutRootNode.uP; the vulnerability is exploitable by supplying arbitrary script/HTML via the utf parameter. The CVSSv2 base score is 4.3 (MEDIUM) with network attack vector and no authentication required, affecti...
CVE-2004-2015
Cross-site scripting XSS vulnerability in WebCT Campus Edition allows remote attackers to inject arbitrary HTML or web script via 1 iframe, 2 img, or 3 object tags...
CVE-2004-1593
Cross-site scripting XSS vulnerability in render.UserLayoutRootNode.uP in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via the utf parameter...
XXS in SCT email client
Vendor : SCT URL : http://www.SCT.com/ Version: Campus Pipeline Risk : Cross site scripting Description: Fusetalk SCT Campus Pipeline is the Web platform of choice at over 175 institutions. It improves efficiency, builds community, and provides freedom of choice by integrating disparate systems a...
SCT javascript execution vulnerability
Vendor : SCT URL : http://www.sct.com/Education/Products/ConnectedLearning/CampusPipeline.html Version : CampusPipeline Risk : javascript execution Description: SCT Campus Pipeline is the Web platform of choice at over 175 institutions. It improves efficiency, builds community, and provides freed...
CVE-2004-1935
Cross-site scripting XSS vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an e-mail attachment...
WebCT Campus Edition 4.1 - Cross site scripting using CSS @import
Name: WebCT Campus Edition 4.1 - Cross site scripting using CSS @import Release date: 2004/03/29 Application: WebCT Campus Edition 4.1 4.1.1.5, possibly others Vendor URL: http://www.webct.com/ WebCT Inc. Author: Simon Boulet simon boulet divahost net Legal Notice: -------------------- This...