CVE-2007-6517

2007-12-2420:00:00

mitre

www.cve.org

8.5 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.9%

JSON

SQL injection vulnerability in the forget password section (LostPwd.asp) in Eagle Software Aeries Browser Interface (ABI) 3.7.9.17 allows remote attackers to execute arbitrary SQL commands via the EmailAddress parameter. NOTE: some of these details are obtained from third party information.

References

aria-security.net/forum/showthread.php?p=1174

secunia.com/advisories/28193

www.osvdb.org/39383

www.securityfocus.com/archive/1/485393/100/0/threaded

www.securityfocus.com/bid/26962

www.vupen.com/english/advisories/2007/4302

exchange.xforce.ibmcloud.com/vulnerabilities/39176