CVE-2008-0943

CVE-2008-0943 describes multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2. The flaws allow remote attackers to execute arbitrary SQL commands via (1) the FC parameter to Comments.asp, or the Term parameter to (2) Labels.asp or (3) ClassList.asp. The C...

CVE-2008-0943: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface ABI 3.7.2.2 allow remote attackers to execute arbitrary SQL commands via the 1 FC parameter to Comments.asp, or the Term parameter to 2 Labels.asp or 3 ClassList.asp...