CVE-2008-0943
Aeries Student Information System 3.7.2.2 - SQL Injection via FC Parameter or Term Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-0943. PoCs published by Arsalan Emamjomehkashan.
AI-analyzed exploit summary The provided text describes SQL injection and HTML injection vulnerabilities in Aeries Student Information System but does not include functional exploit code. It references a generic example URL without payload details.
Description
Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) FC parameter to Comments.asp, or the Term parameter to (2) Labels.asp or (3) ClassList.asp.
Exploits (3)
The provided text describes SQL injection and HTML injection vulnerabilities in Aeries Student Information System but does not include functional exploit code. It references a generic example URL without payload details.
The provided text describes SQL injection and HTML injection vulnerabilities in Aeries Student Information System. It includes a sample URL demonstrating the SQL injection but lacks executable exploit code.
The provided text describes SQL injection and HTML injection vulnerabilities in Aeries Student Information System but does not include functional exploit code. It references a URL parameter vulnerable to SQLi without a payload or demonstration.