Arsalan Emamjomehkashan has reported some vulnerabilities in Aeries Browser Interface, which can be exploited by malicious users to conduct SQL injection and script insertion attacks.

1) Input passed to the "title" form field when adding a new event is not properly sanitised before being used. This can be exploited to insert arbitary HTML and script code, which will be executed in a user's browser session in context of an affecte site when the malicious data is viewed.

The vulnerabilities are reported in version 3.8.2.8. Other versions may also be affected.

3) Input passed to the "FC" parameter in Comments.asp, and to the "Term" parameter in Labels.asp and ClassList.asp is not properly sanitised before being used in an SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

The vulnerabilities are reported in version 3.7.2.2. Other versions may also be affected.

Solution
Grant only trusted users access to the application.
Further details available to Secunia VIM customers

Provided and/or discovered by
Arsalan Emamjomehkashan

Changelog
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers