CVE-2007-6517

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-12-24 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in the forget password section (LostPwd.asp) in Eagle Software Aeries Browser Interface (ABI) 3.7.9.17 allows remote attackers to execute arbitrary SQL commands via the EmailAddress parameter. NOTE: some of these details are obtained from third party information.

Affected products

Aeries Browser Interface: 3.7.9.17

References

http://aria-security.net/forum/showthread.php?p=1174
http://secunia.com/advisories/28193
http://www.osvdb.org/39383
http://www.securityfocus.com/archive/1/485393/100/0/threaded
http://www.securityfocus.com/bid/26962
http://www.vupen.com/english/advisories/2007/4302
https://exchange.xforce.ibmcloud.com/vulnerabilities/39176
http://aria-security.net/forum/showthread.php?p=1174
http://secunia.com/advisories/28193
http://www.osvdb.org/39383
http://www.securityfocus.com/archive/1/485393/100/0/threaded
http://www.securityfocus.com/bid/26962

Get alerted when CVE-2007-6517 or the next vulnerability affects your stack