CVE-2008-0942: Aeries Student Information System

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote attackers to execute arbitrary SQL commands via the GrdBk parameter.

Affected products

• Aeries Aeries Student Information System: version 3.7.2.2 only; version 3.8.2.8 only

Published 2008-02-25. Last modified 2026-06-16.