CVE-2000-0627
BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to...
CVE-2000-0627 is a high vulnerability (CVSS 7.5) in Blackboard Courseinfo, published July 18, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.46%, the 73rd percentile. No source names a fixed version.
BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl.
Exploit likelihood
What each source reports
NVD Score used
BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl.
- Record
CVE-2000-0627- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl.
- Record
CVE-2000-0627- Updated
- 2026-11-02
EUVDEUVD-2000-0623 No score
BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl.
- Record
EUVD-2000-0623- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w2fq-mj73-7568 No score
BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to...
BlackBoard CourseInfo 4.0 does not properly authenticate users, which allows local users to modify CourseInfo database information and gain privileges by directly calling the supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl.
- Record
GHSA-w2fq-mj73-7568- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
securityfocus.com/frames?content=/templates/archive.pike%3Flist%3D1%26msg%3D20000719151904.I17986%40securityfocus.com
archives.neohapsis.com/archives/bugtraq/2000-07/0254.html
exchange.xforce.ibmcloud.com/vulnerabilities/4946
nvd.nist.gov/vuln/detail/CVE-2000-0627
github.com/advisories/GHSA-w2fq-mj73-7568