2 matches found
CVE-2007-6517: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the forget password section LostPwd.asp in Eagle Software Aeries Browser Interface ABI 3.7.9.17 allows remote attackers to execute arbitrary SQL commands via the EmailAddress parameter. NOTE: some of these details are obtained from third party information...
7.5CVSS6.5AI score0.01299EPSS
SaveExploits0References2
[Aria-Security.net] ABI Version 3.7.9.17 Remote SQL Injection
Aria-Security Team httP://Aria-Security.Net -------------------------- ABI Version 3.7.9.17 Remote SQL Injection The forget password section at LostPwd.asp? has the vulnerability to run SQL query and give the attacker the information neeeded. The-0utl4w Credits goes to Aria-Security...
2.3AI score
SaveExploits0
20