Approved changes feed: RSS · Atom

cpe:2.3:a:blackboard:blackboard:6.0:*:*:*:*:*:*:*

part: a version: 6.0 update: *

VendorBlackboard (7fa2ec50-0f9d-59ab-8245-e6281fc9111e)
ProductBlackboard (f0ade262-06c2-54a3-842a-ec7f7d4bef90)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-4308 vulnerable 2026-06-08 04:49:17.522315 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23, and Blackboard Vista 4 allow remote attackers to inject arbitrary Javascript, VBScript, or HTML via (1) data, (2) vbscript, and (3) malformed javascript URIs in various HTML tags when posting to the Discussion Board.
Published: 2006-08-23T19:00:00.000Z
Updated: 2024-08-07T19:06:06.871Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0511 vulnerable 2026-06-08 04:48:54.200733 Details available
Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allows subsequent users to log in as the previous user and gain privileges. NOTE: the vendor has disputed this issue, saying that "This is a customer specific issue related to their Kerberos authentication single sign-on application and not a vulnerability in the Blackboard product.
Published: 2006-02-01T23:00:00.000Z
Updated: 2024-08-07T16:41:27.677Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.