CVE-2008-0943

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.01%

Published

Feb 25, 2008

Modified

Jun 16, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBEagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 - 'Comments.asp?FC' SQL Injection Exploit-DBEagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 - 'Labels.asp?Term' SQL Injection Exploit-DBEagle Software Aeries Student Information System 3.7.2.2/3.8.2.8 - 'ClassList.asp?Term' SQL Injection

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) FC parameter to Comments.asp, or the Term parameter to (2) Labels.asp or (3) ClassList.asp.

Weaknesses (CWE)

CWE-89

Affected Products (2)

aeries · aeries_student_information_systemvulnerable

References (10)

http://secunia.com/advisories/29053

Vendor Advisory

http://securityreason.com/securityalert/3696

http://www.securityfocus.com/archive/1/488428/100/0/threaded

http://www.securityfocus.com/bid/27924

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/40757