CVEvulnerability
CVE-2008-0943
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-02-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) FC parameter to Comments.asp, or the Term parameter to (2) Labels.asp or (3) ClassList.asp.
Affected configurations
• aeries aeries student information system 3.7.2.2
• aeries aeries student information system 3.8.2.8
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/29053 Vendor Advisory
- http://securityreason.com/securityalert/3696 securityreason.com
- http://www.securityfocus.com/archive/1/488428/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27924 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40757 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/29053 Vendor Advisory
- http://securityreason.com/securityalert/3696 securityreason.com
- http://www.securityfocus.com/archive/1/488428/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27924 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40757 exchange.xforce.ibmcloud.com