CVE-2008-1225

MEDIUM 4.3CVE-2008-1225 · Published 10/03/2008 · updated 16/06/2026

In short

CVE-2008-1225 is a MEDIUM (CVSS 4.3) vulnerability affecting webct (webct).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
webct webct	`= 4.1.5.8`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in WebCT Campus Edition 4.1.5.8, when "Don't wrap text" is enabled, allow remote authenticated users to inject arbitrary web script or HTML via a (1) mail message or (2) discussion board message. NOTE: this might overlap CVE-2005-1076.

References

marc.info · Exploit
secunia.com/advisories/29227 · Vendor Advisory
balupton.com/blogs/dev
balupton.com/documents/webct_exploits.txt
securityfocus.com/bid/28107 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/41047

More vulnerabilities in webct

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free