Eagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 Labels.asp Term Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an HTML-injection issue, because it fails to sufficiently sanitize...

CVE-2008-0943

CVE-2008-0943 describes multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2. The flaws allow remote attackers to execute arbitrary SQL commands via (1) the FC parameter to Comments.asp, or the Term parameter to (2) Labels.asp or (3) ClassList.asp. The C...