medium5.0Public exploit code
CVE-2008-2857
AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive informatio…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Alstrasoft AskMe Pro 2.1 - Multiple SQL Injections2008-06-14 · webapps · php · Verified
Impact
AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alstrasoft | Askme | through 2.1 |