返回 CVE 瀏覽器

CVE-2005-4206

MEDIUM

6.1

CVSS Severity Score

EPSS Score0.1660%

EPSS Percentile43.69th

Published2005年12月13日

Last Modified2026年4月16日

Vulnerability Description

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to redirect users to other URLs and conduct phishing attacks via a modified url parameter to frameset.jsp, which loads the URL into a frame and causes it to appear to be part of a valid page.

Affected Platforms (CPE)

📦

Blackboard

Academic Suite

<= 6.0.0.0

📦

Blackboard

Academic Suite

= 6.2.3.23

📦

Blackboard

Academic Suite

= 6.3.1.424

References & Advisories

🔗 http://secunia.com/advisories/17991

🔗 http://www.ipomonis.com/advisories/Bb_6.zip

🔗 http://www.osvdb.org/21618

🔗 http://www.securityfocus.com/bid/15814

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/23558

🔗 http://secunia.com/advisories/17991

🔗 http://www.ipomonis.com/advisories/Bb_6.zip

🔗 http://www.osvdb.org/21618

相關漏洞威脅

CVE-2005-433810.0

announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions befor...

CVE-2005-43377.5

The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before...

CVE-2008-18836.8

The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easie...

CVE-2006-39146.0

Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitra...