CVE-2005-1076 Cross-site scripting (XSS) vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remote attackers to inject arbitrary web script or HTML via the message field.
MediumCVSS 4.3
EPSS 1.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in the discussion board functionality for WebCT Campus Edition 4.1 allows remote attackers to inject arbitrary web script or HTML via the message field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webct | = campus_4.1 | No fix listed |
References
- 20050411 WebCT 4.1 vulnerable to XSS attacks exploit mailing-list vendor-advisory
- 13101 exploit vdb-entry