Sql injection

2007-12-2420:46:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.9%

JSON

SQL injection vulnerability in the forget password section (LostPwd.asp) in Eagle Software Aeries Browser Interface (ABI) 3.7.9.17 allows remote attackers to execute arbitrary SQL commands via the EmailAddress parameter. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
aeries_browser_interfaceeq3.7.9.17

CPE	Name	Operator	Version
	aeries_browser_interface	eq	3.7.9.17

References

aria-security.net/forum/showthread.php?p=1174

secunia.com/advisories/28193

www.osvdb.org/39383

www.securityfocus.com/archive/1/485393/100/0/threaded

www.securityfocus.com/bid/26962

www.vupen.com/english/advisories/2007/4302

exchange.xforce.ibmcloud.com/vulnerabilities/39176