CVE-2008-3421

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-07-31 · updated 2026-06-16
Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the authentication of student users for requests that change configuration and enrollments via unspecified input to (1) update_module.jsp, (2) enroll_course.pl, and (3) unenroll.jsp.

Affected products

Blackboard Academic Suite: 8.0.260.7

References

http://ceaseless.ws/bb-csrf/
http://secunia.com/advisories/31177
http://www.securitytracker.com/id?1020559
https://exchange.xforce.ibmcloud.com/vulnerabilities/43986
http://ceaseless.ws/bb-csrf/
http://secunia.com/advisories/31177
http://www.securitytracker.com/id?1020559
https://exchange.xforce.ibmcloud.com/vulnerabilities/43986

Get alerted when CVE-2008-3421 or the next vulnerability affects your stack