Unscored CVE-2006-3914 EUVD-2006-3908GHSA-wxv2-v8vx-f2j4

Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML o…

Published Jul 28, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web script by bypassing client-side validation through disabling JavaScript when submitting an essay response, which has no server-side validation before being viewed via "View Attempt Details" in the Gradebook.

References

1295 third-party-advisory
20060720 Blackboard Academic Suite 6.2.23 +/-: Persistent cross-site scripting vulnerability mailing-list
blackboard-test-textbox-xss(27895) vdb-entry
1016556 vdb-entry
19101 vdb-entry