high7.5Public exploit code
CVE-2008-2902
SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id paramet…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Alstrasoft AskMe Pro 2.1 - Multiple SQL Injections2008-06-14 · webapps · php · Verified
Impact
SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: The que_id parameter to forum_answer.php is already covered by CVE-2007-4085.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alstrasoft | Askme Pro | through 2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/30672
- http://www.securityfocus.com/bid/29732
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43106
- https://www.exploit-db.com/exploits/5821
- http://secunia.com/advisories/30672
- http://www.securityfocus.com/bid/29732
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43106
- https://www.exploit-db.com/exploits/5821