Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23, and Blackboard Vista 4 allow remote attackers to inject arbitrary Javascript, VBScript, or HTML via (1) data, (2) vbscript, and (3) malformed javascript URIs in various HTML tags when posting to the Discussion Board.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Blackboard | Blackboard | 6.0 |
| Blackboard | Blackboard Learning And Community Portal Suite | 6.0 |
| Blackboard | Vista | 4 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/21577Vendor Advisory
- http://securitytracker.com/id?1016735
- http://www.securityfocus.com/archive/1/444062/100/0/threaded
- http://www.securityfocus.com/archive/1/444116/100/0/threaded
- http://www.securityfocus.com/archive/1/444885/100/0/threaded
- http://www.securityfocus.com/bid/19308
- http://www.vupen.com/english/advisories/2006/3366Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28537
- http://secunia.com/advisories/21577Vendor Advisory
- http://securitytracker.com/id?1016735
- http://www.securityfocus.com/archive/1/444062/100/0/threaded
- http://www.securityfocus.com/archive/1/444116/100/0/threaded
- http://www.securityfocus.com/archive/1/444885/100/0/threaded
- http://www.securityfocus.com/bid/19308
- http://www.vupen.com/english/advisories/2006/3366Vendor Advisory
FAQ
What is CVE-2006-4308?
CVE-2006-4308 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23, and Blackboard Vista 4 allow remote attackers to inject ar...
How severe is CVE-2006-4308?
CVE-2006-4308 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2006-4308?
Check the references section above for vendor advisories and patch information. Affected products include: Blackboard Blackboard, Blackboard Blackboard Learning And Community Portal Suite, Blackboard Vista.