CVEvulnerability

CVE-2006-4308

4.3 MEDIUM Published 2006-08-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-08-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23, and Blackboard Vista 4 allow remote attackers to inject arbitrary Javascript, VBScript, or HTML via (1) data, (2) vbscript, and (3) malformed javascript URIs in various HTML tags when posting to the Discussion Board.

Affected configurations

• blackboard blackboard 6.0 • blackboard blackboard learning and community portal suite 6.0 • blackboard blackboard learning and community portal suite 6.2.3.23 • blackboard vista 4

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

Referenced by CWE · observed example (3)

  • CWE-184 Incomplete List of Disallowed Inputs weakness
  • CWE-692 Incomplete Denylist to Cross-Site Scripting weakness
  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References