CVE-2008-1549

Multiple SQL injection vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to execute arbitrary SQL commands via the (1) GrdBk parameter to GradebookOptions.asp and the (2) SchlCode variable to loginproc.asp, a different vector than CVE-2008-0942.

Link	Resource
http://www.securityfocus.com/bid/28436
http://secunia.com/advisories/29533	Vendor Advisory
http://securityreason.com/securityalert/3787
https://exchange.xforce.ibmcloud.com/vulnerabilities/41429
http://www.securityfocus.com/archive/1/490033/100/0/threaded

Configuration 1

cpe:2.3:a:aeries:aeries_student_information_system:3.8.3.14:*:*:*:*:*:*:*

---

Published : 2008-03-31 05:44

Updated : 2018-10-11 08:35

---

NVD link : CVE-2008-1549

Mitre link : CVE-2008-1549

No products.

CWE-89