CVE-2000-0627

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jul 18, 2000
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2000

CVE-2000-06287.5The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files.CVE-2000-06297.5The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading JavaCVE-2000-06305.0IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment CVE-2000-06315.0An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing CVE-2000-06327.5Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via aCVE-2000-06332.1Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system.CVE-2000-06345.0The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) atCVE-2000-06357.5The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metachaCVE-2000-06365.0HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quoteCVE-2000-06374.6Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, CVE-2000-063810.0bb-hostsvc.sh in Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the HOSTSVC paraCVE-2000-06397.5The default configuration of Big Brother 1.4h2 and earlier does not include proper access restrictions, which allows remote attackers to exe
CVE-2000-0627: High severity, CVSS 7.5 | Vulnix