CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

27 matches found

Cvelist•added 2008/02/25 9:0 p.m.•22 views

CVE-2008-0941

Cross-site scripting XSS vulnerability in Eagle Software Aeries Browser Interface ABI 3.8.2.8 allows remote authenticated users to inject arbitrary web script or HTML via an event...

5.3AI score0.011EPSS

Exploits1References5

CVE•added 2008/02/25 9:0 p.m.•40 views

CVE-2008-0941

The vulnerability CVE-2008-0941 affects Eagle Software Aeries Browser Interface (ABI) 3.8.2.8. It is a Cross-site Scripting (XSS) flaw that allows remote authenticated users to inject arbitrary web script or HTML via an event. The NVD entry lists a base score of 4.3 (Medium) with vector AV:N/AC:M...

4.3CVSS5.3AI score0.011EPSS

Exploits1References5Affected Software1

Packet Storm•added 2008/02/22 12:0 a.m.•24 views

aeries-sql.txt

Discovered By : Arsalan Emamjomehkashan [email protected] aeries browser interface 3.7.2.2 SQL Injection Website:http://aeries.com/ Demo:you can test it on http://demo.aeries.com/abi/ Comments.asp?&FC=SQL Labels.asp?&Term=SQL ClassList.asp&Term=SQL -------------------------------- Aria-Security...

7.4AI score

Exploits0

securityvulns•added 2008/02/22 12:0 a.m.•35 views

aeries browser interface(ABI) 3.7.2.2 Remote SQL Injection

3AI score

Exploits0

ATTACKERKB•added 2007/12/24 8:46 p.m.•2 views

CVE-2007-6517

SQL injection vulnerability in the forget password section LostPwd.asp in Eagle Software Aeries Browser Interface ABI 3.7.9.17 allows remote attackers to execute arbitrary SQL commands via the EmailAddress parameter. NOTE: some of these details are obtained from third party information...

7.5CVSS6.4AI score0.01299EPSS

Exploits0References8