Published: 25/02/2008 Updated: 15/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 765

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Subscribe to Aeries Student Information System

Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote malicious users to execute arbitrary SQL commands via the (1) FC parameter to Comments.asp, or the Term parameter to (2) Labels.asp or (3) ClassList.asp.

Vulnerable Product	Search on Vulmon	Subscribe to Product
aeries aeries student information system 3.7.2.2
aeries aeries student information system 3.8.2.8

source: wwwsecurityfocuscom/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an HTML-injection issue, because it fails to sufficiently sanitize user-supplied data Exploiting these issues could allow an attacker to steal cookie-based auth ...

source: wwwsecurityfocuscom/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an HTML-injection issue, because it fails to sufficiently sanitize user-supplied data Exploiting these issues could allow an attacker to steal cookie-based au ...

source: wwwsecurityfocuscom/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an HTML-injection issue, because it fails to sufficiently sanitize user-supplied data Exploiting these issues could allow an attacker to steal cookie-based authen ...

CWE-89 http://www.securityfocus.com/bid/27924 http://secunia.com/advisories/29053 http://securityreason.com/securityalert/3696 https://exchange.xforce.ibmcloud.com/vulnerabilities/40757 http://www.securityfocus.com/archive/1/488428/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/31276/

CVE-2008-0943

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect