CVE:CVE-2008-0943
CNNVD:CNNVD-200802-451
Eagle Software Aeries Browser Interface(ABI)存在多个SQL注入漏洞。远程攻击者可以借助(1)Comments.asp的FC参数, 或者(2)Labels.asp和(3)ClassList.asp的Term参数执行任意的SQL指令。
solution:Upgrade aeries aeries_student_information_system to a higher version than 3.7.2.2,3.8.2.8,and avoid the version 3.7.2.2,3.8.2.8