CVE-2004-2015

Cross-site scripting XSS vulnerability in WebCT Campus Edition allows remote attackers to inject arbitrary HTML or web script via 1 iframe, 2 img, or 3 object tags...

CVE-2005-1076

Cross-site scripting XSS vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remote attackers to inject arbitrary web script or HTML via the message field...

CVE-2005-1076

Cross-site scripting XSS vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remote attackers to inject arbitrary web script or HTML via the message field...

CVE-2005-1076

CVE-2005-1076 describes a cross-site scripting (XSS) vulnerability in the WebCT Campus Edition 4.1 discussion board, allowing an attacker to inject arbitrary script/HTML via the message field. The connected Red Hat and CVE-2008-1225 records corroborate XSS in WebCT 4.1.5.8 and note potential over...

WebCT 4.1 vulnerable to XSS attacks

The discussion board feature of WebCT is vulnerable to XSS. Here is the proof of concept: When you are composing a new message, in the message field of the form, type this: /pretable background=javascript:alert"XSS Warning" /table Then submit the message. You should see a JavaScript alert box tha...

WebCT Discussion Board 4.1 - HTML Injection

WebCT Discussion Board 4.1 - HTML Injection source: https://www.securityfocus.com/bid/13101/info WebCT is reportedly affected by an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to using it in dynamically generated...

WebCT Discussion Board 4.1 - HTML Injection

source: https://www.securityfocus.com/bid/13101/info WebCT is reportedly affected by an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to using it in dynamically generated content. Attacker-supplied HTML and script co...

CVE-2004-2015

Cross-site scripting XSS vulnerability in WebCT Campus Edition allows remote attackers to inject arbitrary HTML or web script via 1 iframe, 2 img, or 3 object tags...

WebCT Campus Edition 4.1 - Cross site scripting using CSS @import

Name: WebCT Campus Edition 4.1 - Cross site scripting using CSS @import Release date: 2004/03/29 Application: WebCT Campus Edition 4.1 4.1.1.5, possibly others Vendor URL: http://www.webct.com/ WebCT Inc. Author: Simon Boulet simon boulet divahost net Legal Notice: -------------------- This...

CVE-2004-1872

Cross-site scripting XSS vulnerability in WebCT Campus Edition 4.1.1.5 allows remote attackers to inject arbitrary web script or HTML via the @import URL function in a CSS style tag...

WebCT Campus Edition 3.8/4.x - HTML Injection

source: https://www.securityfocus.com/bid/9999/info It has been reported that WebCT Campus Edition may be prone to an HTML injection vulnerability that may allow a remote attacker to execute arbitrary HTML or script code in the browser of an unsuspecting user. A malicious user could supply...

CVE-2001-1003

Affected software : Respondus 1.1.2 for WebCT. Vulnerability : weak encryption used to remember usernames and passwords stored in WEBCT.SVR. Impact : local users who can read WEBCT.SVR can decrypt passwords and gain additional privileges. Remediation : not specified in the provided documents.

Respondus for WebCT 1.1.2 - Weak Password Encryption

Respondus for WebCT 1.1.2 - Weak Password Encryption source: https://www.securityfocus.com/bid/3228/info Respondus is an application designed to add functionality to WebCT's quiz, self-test and survey tools. WebCT is a commercial e-learning solution. When a user opts to have Respondus remember th...

Respondus for WebCT 1.1.2 - Weak Password Encryption

source: https://www.securityfocus.com/bid/3228/info Respondus is an application designed to add functionality to WebCT's quiz, self-test and survey tools. WebCT is a commercial e-learning solution. When a user opts to have Respondus remember the username/password for WebCT access, the information...