NVD

Id
1185  
Name
CVE-2008-1225  
Description
Multiple cross-site scripting (XSS) vulnerabilities in WebCT Campus Edition 4.1.5.8, when "Don"t wrap text" is enabled, allow remote authenticated users to inject arbitrary web script or HTML via a (1) mail message or (2) discussion board message. NOTE: this might overlap CVE-2005-1076.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-03-10  
Modified Date
2008-09-05  
Seq
2008-1225  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
7386 1185 CVE-2008-1225 20080305 WebCT 4.x Javascript Session Stealer Exploits  View
7387 1185 CVE-2008-1225 http://www.balupton.com/blogs/dev?title=webct_session_stealer_exploit  View
7388 1185 CVE-2008-1225 http://www.balupton.com/documents/webct_exploits.txt  View
7389 1185 CVE-2008-1225 28107  View
7390 1185 CVE-2008-1225 webct-dontwraptext-xss(41047)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50247 JVNDB-2008-005557 WebCT Campus Edition におけるクロスサイトスクリプティングの脆弱性 WebCT Campus Edition には、"テキストをラップしない" が有効になっている際、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1225 31338 CVE-2008-1225 1185 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005557.html 2008-03-10 2012-12-20 View