PT-2008-2818 · Blackboard · Webct Campus Edition

Published 2008-03-10 · Updated 2017-08-08 · CVE-2008-1225

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions WebCT Campus Edition version 4.1.5.8

Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a mail message or discussion board message when "Don't wrap text" is enabled.

Recommendations For WebCT Campus Edition version 4.1.5.8, consider disabling the "Don't wrap text" option to mitigate the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-1225

Affected Products

Webct Campus Edition

References · 8

• 🔥 https://exploit-db.com/exploits/31337 · Exploit
• 🔥 http://marc.info/?l=full-disclosure&m=120471944119467&w=2 · Exploit
• 🔥 http://securityfocus.com/bid/28107 · Exploit
• http://secunia.com/advisories/29227 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1225 · Security Note
• http://balupton.com/documents/webct_exploits.txt · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41047 · Note
• http://balupton.com/blogs/dev?title=webct_session_stealer_exploit · Note