CVE-2008-1795 - CVE House
Back to Database
Status published Medium CVE-2008-1795

Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remote attackers to inject arbitrary web script or HTML via (1) the searchText parameter in a Course action to webapps/blackboard/execute/viewCatalog or (2) the data__announcements___pk1_pk2__subject parameter in an ADD action to bin/common/announcement.pl.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-1795

Credits & Attribution

No credits recorded in the NVD database.

References

More from blackboard

View All →
CVE-2022-39196
Blackboard Learn 1.10.1 allows remote authenticated users to read unintended...
Medium 6.5
CVE-2021-36747
Blackboard Learn through 9.1 allows XSS by an authenticated user...
Medium 5.4
CVE-2021-36746
Blackboard Learn through 9.1 allows XSS by an authenticated user...
Medium 5.4
CVE-2020-9008
Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows...
Medium 5.4
CVE-2020-25902
Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting...
Medium 6.1

Affected Vendor

Affected Software

academic suite
Vulnerable Versions:
0

Timeline

Official Publish: April 15th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.