43 matches found
Sql injection
SQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface ABI 3.8.2.8 allows remote attackers to execute arbitrary SQL commands via the GrdBk parameter...
Sql injection
Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface ABI 3.7.2.2 allow remote attackers to execute arbitrary SQL commands via the 1 FC parameter to Comments.asp, or the Term parameter to 2 Labels.asp or 3 ClassList.asp...
CVE-2008-0942
SQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface ABI 3.8.2.8 allows remote attackers to execute arbitrary SQL commands via the GrdBk parameter...
CVE-2008-0943
Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface ABI 3.7.2.2 allow remote attackers to execute arbitrary SQL commands via the 1 FC parameter to Comments.asp, or the Term parameter to 2 Labels.asp or 3 ClassList.asp...
CVE-2008-0941
Cross-site scripting XSS vulnerability in Eagle Software Aeries Browser Interface ABI 3.8.2.8 allows remote authenticated users to inject arbitrary web script or HTML via an event...
CVE-2008-0943
Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface ABI 3.7.2.2 allow remote attackers to execute arbitrary SQL commands via the 1 FC parameter to Comments.asp, or the Term parameter to 2 Labels.asp or 3 ClassList.asp...
CVE-2008-0941
Cross-site scripting XSS vulnerability in Eagle Software Aeries Browser Interface ABI 3.8.2.8 allows remote authenticated users to inject arbitrary web script or HTML via an event...
CVE-2008-0942
SQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface ABI 3.8.2.8 allows remote attackers to execute arbitrary SQL commands via the GrdBk parameter...
CVE-2008-0941
The vulnerability CVE-2008-0941 affects Eagle Software Aeries Browser Interface (ABI) 3.8.2.8. It is a Cross-site Scripting (XSS) flaw that allows remote authenticated users to inject arbitrary web script or HTML via an event. The NVD entry lists a base score of 4.3 (Medium) with vector AV:N/AC:M...
aeries-xss.txt
Discovered By : Arsalan Emamjomehkashan [email protected] aeries browser interfaceABI 3.8.2.8 XSS Website:http://aeries.com/ Login on it add a new event with alert"xss and it will work each time you load your homepage -------------------------------- Aria-Security Team httP://Aria-Security.Net...
aeries3828-sql.txt
Discovered By : Arsalan Emamjomehkashan [email protected] aeries browser interfaceABI 3.8.2.8 Remote SQL Injection Website:http://aeries.com/ GradebookStuScores.asp?GrdBk=SQL -------------------------- Aria-Security Team httP://Aria-Security.Net...
aeries-sql.txt
Discovered By : Arsalan Emamjomehkashan [email protected] aeries browser interface 3.7.2.2 SQL Injection Website:http://aeries.com/ Demo:you can test it on http://demo.aeries.com/abi/ Comments.asp?&FC=SQL Labels.asp?&Term=SQL ClassList.asp&Term=SQL -------------------------------- Aria-Security...
aeries browser interface(ABI) 3.7.2.2 Remote SQL Injection
Discovered By : Arsalan Emamjomehkashan [email protected] aeries browser interface 3.7.2.2 SQL Injection Website:http://aeries.com/ Demo:you can test it on http://demo.aeries.com/abi/ Comments.asp?&FC=SQL Labels.asp?&Term=SQL ClassList.asp&Term=SQL -------------------------------- Aria-Security...
Eagle Software Aeries Student Information System 3.7.2.23.8.2.8 - Comments.asp?FC SQL Injection
Eagle Software Aeries Student Information System 3.7.2.23.8.2.8 - Comments.asp?FC SQL Injection source: https://www.securityfocus.com/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an HTML-injecti...
Eagle Software Aeries Student Information System 3.7.2.23.8.2.8 - ClassList.asp?Term SQL Injection
Eagle Software Aeries Student Information System 3.7.2.23.8.2.8 - ClassList.asp?Term SQL Injection source: https://www.securityfocus.com/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an...
Eagle Software Aeries Student Information System 3.7.2.23.8.2.8 - GradebookStuScores.asp?GrdBk SQL Injection
Eagle Software Aeries Student Information System 3.7.2.23.8.2.8 - GradebookStuScores.asp?GrdBk SQL Injection source: https://www.securityfocus.com/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an...
Eagle Software Aeries Student Information System 3.7.2.23.8.2.8 - Labels.asp?Term SQL Injection
Eagle Software Aeries Student Information System 3.7.2.23.8.2.8 - Labels.asp?Term SQL Injection source: https://www.securityfocus.com/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an HTML-injecti...
Eagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 - 'Labels.asp?Term' SQL Injection
source: https://www.securityfocus.com/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an HTML-injection issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...
Eagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 - 'Comments.asp?FC' SQL Injection
source: https://www.securityfocus.com/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an HTML-injection issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...
Eagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 - 'ClassList.asp?Term' SQL Injection
source: https://www.securityfocus.com/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an HTML-injection issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...