CVE-2006-4308

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 2.0%

from disclosure to weapon1 days

Published on NVDAug 23

1st PoC+1d

exploitation probability

2.0%top 21% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23, and Blackboard Vista 4 allow remote attackers to inject arbitrary Javascript, VBScript, or HTML via (1) data, (2) vbscript, and (3) malformed javascript URIs in various HTML tags when posting to the Discussion Board.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28324

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://secunia.com/advisories/21577 http://securitytracker.com/id?1016735 https://exchange.xforce.ibmcloud.com/vulnerabilities/28537 http://www.securityfocus.com/archive/1/444062/100/0/threaded http://www.securityfocus.com/archive/1/444116/100/0/threaded http://www.securityfocus.com/archive/1/444885/100/0/threaded http://www.securityfocus.com/bid/19308 http://www.vupen.com/english/advisories/2006/3366