PT-2004-2771 · Blackboard · Webct Campus Edition

Simon Boulet

·

CVE-2004-1872

·

Published

2004-03-29

·

Updated

2017-07-11

CVSS v2.0

4.3

Medium

VectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions WebCT Campus Edition version 4.1.1.5
Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the @import URL function in a CSS style tag.
Recommendations For WebCT Campus Edition version 4.1.1.5, consider disabling the @import URL function in CSS style tags as a temporary workaround until a patch is available.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CVE-2004-1872

Affected Products

Webct Campus Edition