CVE:CVE-2006-3914
CNNVD:CNNVD-200607-484
Blackboard Academic Suite 6.2.3.23存在跨站脚本攻击(XSS) 漏洞。远程认证用户可通过在提交短文回复时禁用JavaScript来绕过客户端验证，从而注入任意 HTML或Web脚本 。短文回复在由Gradebook中的 "View Attempt Details" 查看之前不经过服务器端的验证。
solution:Upgrade blackboard blackboard_academic_suite to a higher version than 6.2.3.23,and avoid the version 6.2.3.23