CVE-2008-0943

Aeries Student Information System - SQL Injection

Title source: rule
STIX 2.1

Description

Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) FC parameter to Comments.asp, or the Term parameter to (2) Labels.asp or (3) ClassList.asp.

Exploits (3)

exploitdb WRITEUP VERIFIED
by Arsalan Emamjomehkashan · textwebappsphp
https://www.exploit-db.com/exploits/31277
exploitdb WRITEUP VERIFIED
by Arsalan Emamjomehkashan · textwebappsasp
https://www.exploit-db.com/exploits/31276
exploitdb WRITEUP VERIFIED
by Arsalan Emamjomehkashan · textwebappsasp
https://www.exploit-db.com/exploits/31275

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/488428/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29053
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/27924
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3696
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/40757

Scores

EPSS 0.0042
EPSS Percentile 62.2%

Details

CWE
CWE-89
Status published
Products (2)
aeries/aeries_student_information_system 3.7.2.2
aeries/aeries_student_information_system 3.8.2.8
Published Feb 25, 2008
Tracked Since Feb 18, 2026