CVE:CVE-2008-3421
CNNVD:CNNVD-200807-511
Blackboard Academic Suite 是一款网络辅助教学系统。
Blackboard Academic Suite 8.0.260.7版本存在多个跨站请求伪造漏洞。远程攻击者可以借助对(1)update_module.jsp,(2)enroll_course.pl和(3)unenroll.jsp的未明输入，劫持学生用户请求更改配置和注册的身份认证。
solution:Upgrade blackboard blackboard_academic_suite to a higher version than 8.0.260.7,and avoid the version 8.0.260.7