CVE-2005-4337

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-19 · updated 2026-06-16

Description

The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified user_id parameter and a "/" in the encoded_pw parameter.

Affected products

Blackboard Academic Suite: 6.2.3.23, 6.3.1.424

References

http://www.ipomonis.com/advisories/Bb_6.zip
http://www.osvdb.org/21616
http://www.ipomonis.com/advisories/Bb_6.zip
http://www.osvdb.org/21616

Get alerted when CVE-2005-4337 or the next vulnerability affects your stack