CVE-2008-0943

Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) FC parameter to Comments.asp, or the Term parameter to (2) Labels.asp or (3) ClassList.asp.

Link	Resource
http://www.securityfocus.com/bid/27924	Exploit
http://secunia.com/advisories/29053	Vendor Advisory
http://securityreason.com/securityalert/3696
https://exchange.xforce.ibmcloud.com/vulnerabilities/40757
http://www.securityfocus.com/archive/1/488428/100/0/threaded

Configuration 1

cpe:2.3:a:aeries:aeries_student_information_system:3.7.2.2:*:*:*:*:*:*:* cpe:2.3:a:aeries:aeries_student_information_system:3.8.2.8:*:*:*:*:*:*:*

---

Published : 2008-02-25 09:44

Updated : 2018-10-15 10:03

---

NVD link : CVE-2008-0943

Mitre link : CVE-2008-0943

No products.

CWE-89