Aeries

Aeries Student Information System

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2008-1548

  • EPSS 0.33%
  • Published 31.03.2008 17:44:00
  • Last modified 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to inject arbitrary web script or HTML via the (1) UserName parameter to loginpro...

6.8

CVE-2008-1549

  • EPSS 0.39%
  • Published 31.03.2008 17:44:00
  • Last modified 09.04.2025 00:30:58

Multiple SQL injection vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to execute arbitrary SQL commands via the (1) GrdBk parameter to GradebookOptions.asp and the ...

4.3

CVE-2008-0941

Exploit
  • EPSS 0.33%
  • Published 25.02.2008 21:44:00
  • Last modified 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote authenticated users to inject arbitrary web script or HTML via an event.

7.5

CVE-2008-0942

Exploit
  • EPSS 0.3%
  • Published 25.02.2008 21:44:00
  • Last modified 09.04.2025 00:30:58

SQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote attackers to execute arbitrary SQL commands via the GrdBk parameter.

7.5

CVE-2008-0943

Exploit
  • EPSS 0.41%
  • Published 25.02.2008 21:44:00
  • Last modified 09.04.2025 00:30:58

Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) FC parameter to Comments.asp, or the Term parameter to (2) Labels.asp or (3) ClassLis...