Vulnerabilities > Blackboard > High

DATE CVE VULNERABILITY TITLE RISK
2005-12-19 CVE-2005-4337 Security Bypass vulnerability in Blackboard Academic Suite 6.2.3.23/6.3.1.424
The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified user_id parameter and a "/" in the encoded_pw parameter.
network
low complexity
blackboard
7.5
2002-10-04 CVE-2002-1007 Cross-Site Scripting vulnerability in Blackboard 5.0
Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter in a link to login.pl, (2) the CTID parameter in ProcessInfo.cgi, or (3) the Message parameter in index.cgi.
network
low complexity
blackboard
7.5