CVE-2008-1548 Multiple cross-site scripting (XSS) vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to inject arbitrary web script....
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to inject arbitrary web script or HTML via the (1) UserName parameter to loginproc.asp and the (2) usr parameter to Login.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aeries student information system | = 3.8.3.14 | No fix listed |
References
- 29533 third-party-advisory vendor-advisory
- 3787 third-party-advisory
- 20080325 aeries browser interface(ABI) 3.8.3.14 Remote SQL Injection mailing-list
- 28436 vdb-entry
- abi-loginproc-login-xss(41430) vdb-entry