Skip to content

CVE-2008-2857 AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.

MediumCVSS 5.0 EPSS 2.1%
Published
Updated
Exploit status
No public exploit known

Description

AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.

Affected products

ProductAffected versionsFixed in
alstrasoft askme <= 2.1 No fix listed

References