Blackboard Cross-Site Scripting Vulnerability

Bugtraq ID:	5137
Class:	Input Validation Error
CVE:	CVE-2002-1007
Remote:	Yes
Local:	No
Published:	Jul 01 2002 12:00AM
Updated:	Jul 11 2009 02:56PM
Credit:	Discovery of this issue is credited to Berend-Jan Wever <[email protected]>.
Vulnerable:	Blackboard CourseInfo 5.0 - Microsoft Windows NT 4.0 Blackboard Blackboard 5.0
Not Vulnerable:

Blackboard Cross-Site Scripting Vulnerability

Blackboard is reportedly prone to cross-site scripting attacks. This issue was reported to be in the login.pl script. The vulnerable script fails to sanitize HTML tags from CGI parameters.

Attackers may exploit this condition via a malicious link to a site running the vulnerable software. Successful exploitation will enable an attacker to cause script code to be executed in the web browser of a user who visits the malicious link.

It has been reported that there other instances where Blackboard fails to sanitize arbitrary HTML and script code.

Blackboard Cross-Site Scripting Vulnerability

The following example was submitted to reproduce this issue:

http://target/bin/login.pl?course_id="><SCRIPT>alert()</SCRIPT>

Blackboard Cross-Site Scripting Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Blackboard Cross-Site Scripting Vulnerability

References:

• Blackboard Homepage (Blackboard)
  
• CourseInfo Product Homepage (Blackboard)