CVE-2008-0941

Aeries Student Information System - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote authenticated users to inject arbitrary web script or HTML via an event.

References (5)

[Vendor Advisory] http://secunia.com/advisories/29053

[Exploit] http://www.securityfocus.com/bid/27924

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/40756

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/488430/100/0/threaded

[Third Party Advisory] http://securityreason.com/securityalert/3694

Scores

EPSS 0.0033

EPSS Percentile 55.5%

Classification

CWE

CWE-79

Status draft

Affected Products (2)

aeries/aeries_student_information_system

Timeline

Published Feb 25, 2008

Tracked Since Feb 18, 2026