CVE-2005-4206

Description

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to redirect users to other URLs and conduct phishing attacks via a modified url parameter to frameset.jsp, which loads the URL into a frame and causes it to appear to be part of a valid page.

Weakness classification

• CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Primary references

• cve@mitre.org — Broken Link, Exploit, Vendor Advisory
• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link, Exploit, Third Party Advisory, VDB Entry
• cve@mitre.org — Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Exploit, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Exploit, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry