CVE:CVE-2008-0941
CNNVD:CNNVD-200802-449
Eagle Software Aeries Browser Interface (ABI)存在跨站脚本攻击漏洞。远程授权用户可以通过一个事件来注入任意web脚本或HTML。
solution:Upgrade aeries aeries_student_information_system to a higher version than 3.7.2.2,3.8.2.8,and avoid the version 3.7.2.2,3.8.2.8