CVE-2007-6517 SQL injection vulnerability in the forget password section (LostPwd.asp) in Eagle Software Aeries Browser Interface (ABI) 3.7.9.17 allows remote attackers to execute arbitrary SQL commands via the Ema...
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the forget password section (LostPwd.asp) in Eagle Software Aeries Browser Interface (ABI) 3.7.9.17 allows remote attackers to execute arbitrary SQL commands via the EmailAddress parameter. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aeries browser interface | = 3.7.9.17 | No fix listed |
References
- aria-security.net
- 28193 third-party-advisory vendor-advisory
- 39383 vdb-entry
- 20071220 [Aria-Security.net] ABI Version 3.7.9.17 Remote SQL Injection mailing-list
- 26962 vdb-entry
- ADV-2007-4302 vdb-entry
- aeries-lostpwd-sql-injection(39176) vdb-entry