CVE-2006-3914 - CVE House
Back to Database
Status published Medium CVE-2006-3914

Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows...

Vulnerability Description

Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web script by bypassing client-side validation through disabling JavaScript when submitting an essay response, which has no server-side validation before being viewed via "View Attempt Details" in the Gradebook.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-3914

Credits & Attribution

No credits recorded in the NVD database.

References

More from blackboard

View All →
CVE-2022-39196
Blackboard Learn 1.10.1 allows remote authenticated users to read unintended...
Medium 6.5
CVE-2021-36747
Blackboard Learn through 9.1 allows XSS by an authenticated user...
Medium 5.4
CVE-2021-36746
Blackboard Learn through 9.1 allows XSS by an authenticated user...
Medium 5.4
CVE-2020-9008
Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows...
Medium 5.4
CVE-2020-25902
Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting...
Medium 6.1

Affected Vendor

Affected Software

blackboard academic suite
Vulnerable Versions:
6.2.3.23

Timeline

Official Publish: July 28th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.