CVE-2005-4338 announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to gain administrator privileges by settin...
HighCVSS 10.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to gain administrator privileges by setting the context parameter to "admin".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blackboard academic suite | All versions | No fix listed |
| blackboard academic suite | = 6.2.3.23 | No fix listed |
| blackboard academic suite | = 6.3.1.424 | No fix listed |
References
- www.ipomonis.com exploit vendor-advisory
- 21617 vdb-entry