Total vulnerabilities in the database
The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified user_id parameter and a "/" in the encoded_pw parameter.
| Software | From | Fixed in |
|---|---|---|
| blackboard / academic_suite | 6.2.3.23 | 6.2.3.23.x |
| blackboard / academic_suite | - | - |
| blackboard / academic_suite | 6.3.1.424 | 6.3.1.424.x |