CVE-2008-1548

no score yetEPSS 1.1%

Multiple cross-site scripting (XSS) vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to inject arbitrary web script or HTML via the (1) UserName parameter to loginproc.asp and the (2) usr parameter to Login.asp.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2008-03-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

aeries:aeries_student_information_system

References

http://secunia.com/advisories/29533
http://securityreason.com/securityalert/3787
http://www.securityfocus.com/archive/1/490033/100/0/threaded
http://www.securityfocus.com/bid/28436
https://exchange.xforce.ibmcloud.com/vulnerabilities/41430

Check your stack JSON