Unrated severityNVD Advisory· Published Oct 5, 2007· Updated Jun 16, 2026

CVE-2007-5227

Description

Multiple cross-site scripting (XSS) vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earlier in BlackBoard Academic Suite allow remote attackers to inject arbitrary web script or HTML via the (1) subject_t and (2) body_text parameters. NOTE: vector 2 requires bypassing a client-side security mechanism that attempts to block XSS sequences.

Affected products

Blackboard/Blackboard Learning And Community Post Systems
cpe:2.3:a:blackboard:blackboard_learning_and_community_post_systems:6.3.1.593:*:*:*:*:*:*:*
Blackboard/Blackboard Learning Systemllm-fuzzy
Range: <=6.3.1.593

Patches

Vulnerability mechanics

References

secunia.com/advisories/27005nvdVendor Advisory
osvdb.org/37427nvd
trew.icenetx.net/toolz/advisory-blackboard-messages-en.txtnvd
www.securityfocus.com/bid/25929nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000