CVE-2004-1582: Blackboard Internet Newsboard System

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in BlackBoard 1.5.1 allows remote attackers to execute arbitrary PHP code by modifying the libpath parameter (incorrectly called "libpach") to reference a URL on a remote web server that contains _more.php, as demonstrated using checkdb.inc.php.

Affected products

Published 2004-12-31. Last modified 2026-06-16.