TUCoPS :: HP Unsorted A

TUCoPS :: HP Unsorted A :: bx2546.htm
aeries browser interface(ABI) 3.8.3.14 Remote SQL Injection

aeries browser interface(ABI) 3.8.3.14 Remote SQL Injection aeries browser interface(ABI) 3.8.3.14 Remote SQL Injection


Discovered By : Arsalan Emamjomehkashan

aeries browser interface(ABI) 3.8.3.14 Remote SQL Injection

Website:http://aeries.com/
SQL injection:
GradebookOptions.asp?GrdBk=SQL
loginproc.asp If you post variable "SchlCode"
XSS:
UserName variable on loginproc.asp and usr on Login.asp