Eagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 ClassList.asp Term Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an HTML-injection issue, because it fails to sufficiently sanitize...

Sql injection

SQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface ABI 3.8.2.8 allows remote attackers to execute arbitrary SQL commands via the GrdBk parameter...

CVE-2008-0942

CVE-2008-0942 affects Eagle Software Aeries Browser Interface (ABI) 3.8.2.8. The vulnerability is a SQL injection in GradebookStuScores.asp via the GrdBk parameter, allowing remote attackers to execute arbitrary SQL commands. The related connected records (e.g., CVE-2008-1549) describe additional...

CVE-2008-0941: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Eagle Software Aeries Browser Interface ABI 3.8.2.8 allows remote authenticated users to inject arbitrary web script or HTML via an event...