CVE-2008-1549

2008-03-3117:00:00

mitre

www.cve.org

8.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.5%

JSON

Multiple SQL injection vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to execute arbitrary SQL commands via the (1) GrdBk parameter to GradebookOptions.asp and the (2) SchlCode variable to loginproc.asp, a different vector than CVE-2008-0942.

References

secunia.com/advisories/29533

securityreason.com/securityalert/3787

www.securityfocus.com/archive/1/490033/100/0/threaded

www.securityfocus.com/bid/28436

exchange.xforce.ibmcloud.com/vulnerabilities/41429