CVEvulnerability
CVE-2007-6517
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-12-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the forget password section (LostPwd.asp) in Eagle Software Aeries Browser Interface (ABI) 3.7.9.17 allows remote attackers to execute arbitrary SQL commands via the EmailAddress parameter. NOTE: some of these details are obtained from third party information.
Affected configurations
• aeries aeries browser interface 3.7.9.17
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://aria-security.net/forum/showthread.php?p=1174 aria-security.net
- http://secunia.com/advisories/28193 Vendor Advisory
- http://www.osvdb.org/39383 www.osvdb.org
- http://www.securityfocus.com/archive/1/485393/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26962 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/4302 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39176 exchange.xforce.ibmcloud.com
- http://aria-security.net/forum/showthread.php?p=1174 aria-security.net
- http://secunia.com/advisories/28193 Vendor Advisory
- http://www.osvdb.org/39383 www.osvdb.org
- http://www.securityfocus.com/archive/1/485393/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26962 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/4302 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39176 exchange.xforce.ibmcloud.com