Vulnerabilities > Blackboard > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2005-12-19 | CVE-2005-4337 | Security Bypass vulnerability in Blackboard Academic Suite 6.2.3.23/6.3.1.424 The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified user_id parameter and a "/" in the encoded_pw parameter. | 7.5 |
2002-10-04 | CVE-2002-1007 | Cross-Site Scripting vulnerability in Blackboard 5.0 Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter in a link to login.pl, (2) the CTID parameter in ProcessInfo.cgi, or (3) the Message parameter in index.cgi. | 7.5 |