Cross site scripting

2008-02-2521:44:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.0%

JSON

Cross-site scripting (XSS) vulnerability in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote authenticated users to inject arbitrary web script or HTML via an event.

CPENameOperatorVersion
aeries_student_information_systemeq3.7.2.2
aeries_student_information_systemeq3.8.2.8

CPE	Name	Operator	Version
	aeries_student_information_system	eq	3.7.2.2
	aeries_student_information_system	eq	3.8.2.8

References

secunia.com/advisories/29053

securityreason.com/securityalert/3694

www.securityfocus.com/archive/1/488430/100/0/threaded

www.securityfocus.com/bid/27924

exchange.xforce.ibmcloud.com/vulnerabilities/40756