CVE-2006-4308

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-08-23 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23, and Blackboard Vista 4 allow remote attackers to inject arbitrary Javascript, VBScript, or HTML via (1) data, (2) vbscript, and (3) malformed javascript URIs in various HTML tags when posting to the Discussion Board.

Affected products

Blackboard: 6.0
Blackboard Learning And Community Portal Suite: 6.0, 6.2.3.23
Blackboard Vista: 4

References

http://secunia.com/advisories/21577
http://securitytracker.com/id?1016735
http://www.securityfocus.com/archive/1/444062/100/0/threaded
http://www.securityfocus.com/archive/1/444116/100/0/threaded
http://www.securityfocus.com/archive/1/444885/100/0/threaded
http://www.securityfocus.com/bid/19308
http://www.vupen.com/english/advisories/2006/3366
https://exchange.xforce.ibmcloud.com/vulnerabilities/28537
http://secunia.com/advisories/21577
http://securitytracker.com/id?1016735
http://www.securityfocus.com/archive/1/444062/100/0/threaded
http://www.securityfocus.com/archive/1/444116/100/0/threaded

Get alerted when CVE-2006-4308 or the next vulnerability affects your stack