PT-2008-2818 · Blackboard · Webct Campus Edition

Publicado 2008-03-10 · Atualizado 2017-08-08 · CVE-2008-1225

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions WebCT Campus Edition version 4.1.5.8

Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a mail message or discussion board message when "Don't wrap text" is enabled.

Recommendations For WebCT Campus Edition version 4.1.5.8, consider disabling the "Don't wrap text" option to mitigate the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-1225

Produtos afetados

Webct Campus Edition

Referências · 8

• 🔥 https://exploit-db.com/exploits/31337 · Exploit
• 🔥 http://marc.info/?l=full-disclosure&m=120471944119467&w=2 · Exploit
• 🔥 http://securityfocus.com/bid/28107 · Exploit
• http://secunia.com/advisories/29227 · Aviso do Fabricante
• http://balupton.com/documents/webct_exploits.txt · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41047 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1225 · Nota de Segurança
• http://balupton.com/blogs/dev?title=webct_session_stealer_exploit · Nota