announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to gain administrator privileges by setting the context parameter to "admin".
Software | From | Fixed in |
---|---|---|
blackboard / academic_suite | - | - |
blackboard / academic_suite | 6.2.3.23 | 6.2.3.23.x |
blackboard / academic_suite | 6.3.1.424 | 6.3.1.424.x |