Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-4308. PoCs published by proton.
AI-analyzed exploit summary This exploit demonstrates multiple HTML injection and XSS vulnerabilities in Blackboard products, allowing attackers to execute arbitrary script code in the context of the affected website. It includes various techniques for defacement and cookie theft, targeting both IE and Firefox browsers.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23, and Blackboard Vista 4 allow remote attackers to inject arbitrary Javascript, VBScript, or HTML via (1) data, (2) vbscript, and (3) malformed javascript URIs in various HTML tags when posting to the Discussion Board.
Exploits (1)
This exploit demonstrates multiple HTML injection and XSS vulnerabilities in Blackboard products, allowing attackers to execute arbitrary script code in the context of the affected website. It includes various techniques for defacement and cookie theft, targeting both IE and Firefox browsers.