https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-0750.htmlhttps://patchthecve.com/cve/CVE-2008-0750.htmlTue, 16 Jun 2026 22:50:16 +0000HIGH 7.5: SQL injection vulnerability in philboard_forum.asp in Husrev BlackBoard 2.0.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter.https://patchthecve.com/cve/CVE-2006-4308.htmlhttps://patchthecve.com/cve/CVE-2006-4308.htmlTue, 16 Jun 2026 22:28:49 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23, and Blackboard Vista 4 allow remote attackers to inject arbitrary Javascript, VBScript, or HTML via (1) data, (2) vbscript, and (3) malformed javascript URIs https://patchthecve.com/cve/CVE-2006-0511.htmlhttps://patchthecve.com/cve/CVE-2006-0511.htmlTue, 16 Jun 2026 22:20:44 +0000MEDIUM 4.3: Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allows subsequent users to log in as the previous user and gain privileges. NOTE: the vendor has disputed this issue, saying that "This is a customer specific issuehttps://patchthecve.com/cve/CVE-2004-1581.htmlhttps://patchthecve.com/cve/CVE-2004-1581.htmlTue, 16 Jun 2026 22:07:59 +0000MEDIUM 5.0: BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3) cp.inc.php, which reveals the path in a PHP error message.https://patchthecve.com/cve/CVE-2002-1007.htmlhttps://patchthecve.com/cve/CVE-2002-1007.htmlTue, 16 Jun 2026 21:58:33 +0000HIGH 7.5: Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter in a link to login.pl, (2) the CTID parameter in ProcessInfo.cgi, or (3) the Message parameter in index.cgi.