CVE-2008-2902 SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: The que_id parameter to forum_a...
HighCVSS 7.5
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: The que_id parameter to forum_answer.php is already covered by CVE-2007-4085.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alstrasoft askme pro | <= 2.1 | No fix listed |
References
- 30672 third-party-advisory vendor-advisory
- 29732 exploit vdb-entry
- askmepro-profile-sql-injection(43106) vdb-entry
- 5821 exploit