Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2008-1548

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Eagle Software Aries Student信息系统中的Aeries Browser Interface (ABI) 3.8.3.14存在多个跨站脚本攻击漏洞。远程攻击者借助(1)对loginproc.asp的用户名参数，和(2)对Login.asp的usr参数，注入任意的web脚本或HTML。

AI Predicted 6.1 Difficulty: Easy EPSS 1.06% · P62
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2008-1548

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to inject arbitrary web script or HTML via the (1) UserName parameter to loginproc.asp and the (2) usr parameter to Login.asp.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Aeries Browser Interface 多个跨站脚本攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Eagle Software Aries Student信息系统中的Aeries Browser Interface (ABI) 3.8.3.14存在多个跨站脚本攻击漏洞。远程攻击者借助(1)对loginproc.asp的用户名参数，和(2)对Login.asp的usr参数，注入任意的web脚本或HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2008-1548

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-1548

请登录查看更多情报信息。

Vendor Advisories for CVE-2008-1548 (4)

Other References for CVE-2008-1548 (1)

Same Patch Batch · n/a · 2008-03-31 · 37 CVEs total

CVE-2008-1551 RunCMS 'viewcat.php' SQL注入漏洞
CVE-2008-1566 ManageEngine Applications Manager 'Search.do' 跨站脚本攻击漏洞
CVE-2008-1567 phpMyAdmin Session文件本地信息泄露漏洞
CVE-2008-1568 Comix 'filename' 远程指令执行漏洞
CVE-2008-1569 policyd-weight socket不安全临时文件创建漏洞
CVE-2008-1570 Policyd-weight create_lockpath函数 竞争条件错误漏洞
CVE-2008-0070 Orb Networks Orb RPC请求远程整数溢出漏洞
CVE-2008-1549 Aeries Browser Interface 多个SQL注入漏洞
CVE-2008-1550 CubeCart index.php多个跨站脚本攻击漏洞
CVE-2008-1565 phpBB PJIRC Module 'irc.php' 目录遍历漏洞
CVE-2008-1552 SILC客户端及服务器密钥协商远程整数溢出漏洞
CVE-2008-1553 TopperMod 'mod.php' 目录遍历漏洞
CVE-2008-1554 TopperMod 'localita'参数 SQL注入漏洞
CVE-2008-1555 BolinOS 'gbincluder.php' 目录遍历漏洞
CVE-2008-1556 BolinOS 多个跨站脚本攻击漏洞
CVE-2008-1557 BolinOS 'gBphpInfo.php' 信息泄露漏洞
CVE-2008-1558 MPlayer 'sdpplin.c' sdpplin_parse()函数 整数溢出漏洞
CVE-2008-1559 Joomla!Mambo Alphacontent 组件 'id'参数 SQL注入漏洞
CVE-2008-1598 IBM AIX 内核ProbeVue特权铭感信息泄露漏洞
CVE-2008-0706 HP Compaq Notebook PC BIOS 未明本地未授权访问漏洞

Showing top 20 of 37 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-1548

No comments yet

Leave a comment