CVE-2008-0941

Cross-site scripting (XSS) vulnerability in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote authenticated users to inject arbitrary web script or HTML via an event.

Published: Feb 25, 2008
Updated: Apr 13, 2023
CVE: CVE-2008-0941
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
aeries / aeries_student_information_system	3.7.2.2	3.7.2.2.x
aeries / aeries_student_information_system	3.8.2.8	3.8.2.8.x

http://secunia.com/advisories/29053
http://securityreason.com/securityalert/3694
http://www.securityfocus.com/archive/1/488430/100/0/threaded
http://www.securityfocus.com/bid/27924
https://exchange.xforce.ibmcloud.com/vulnerabilities/40756

Vulnerability Database

CVE-2008-0941