CVE-2005-4206

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to redirect users to other URLs and conduct phishing attacks via a modified url parameter to frameset.jsp, which loads the URL into a frame and causes it to appear to be part of a valid page.

• CWE-601
• CWE-601

• http://secunia.com/advisories/17991Broken Link, Exploit, Vendor Advisory
• http://www.ipomonis.com/advisories/Bb_6.zipBroken Link
• http://www.osvdb.org/21618Broken Link
• http://www.securityfocus.com/bid/15814Broken Link, Exploit, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23558Third Party Advisory, VDB Entry
• http://secunia.com/advisories/17991Broken Link, Exploit, Vendor Advisory
• http://www.ipomonis.com/advisories/Bb_6.zipBroken Link
• http://www.osvdb.org/21618Broken Link
• http://www.securityfocus.com/bid/15814Broken Link, Exploit, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23558Third Party Advisory, VDB Entry

Published

Dec 13, 2005

Last Modified

Jun 16, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-4200Multiple unspecified vulnerabilities in MyBulletinBoard (MyB…
• CVE-2005-4201Directory traversal vulnerability in My Album Online 1.0 all…
• CVE-2005-4202Multiple directory traversal vulnerabilities in LogiSphere 0…
• CVE-2005-4203LogiSphere 0.9.9j does not restrict the number of messages t…
• CVE-2005-4204Cross-site scripting (XSS) vulnerability in LogiSphere 0.9.9…
• CVE-2005-4205Cross-site scripting (XSS) vulnerability in searchdb.asp in …
• CVE-2005-4207SQL injection vulnerability in BTGrup Admin WebController Sc…
• CVE-2005-4208Directory traversal vulnerability in Flatnuke 2.5.6 allows r…
• CVE-2005-4209WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote att…
• CVE-2005-4210Opera before 8.51, when running on Windows with Input Method…
• CVE-2005-4211PHP remote file inclusion vulnerability in coin_includes/db.…
• CVE-2005-4212Directory traversal vulnerability in coin_includes/db.php in…