Lucene search
HistoryJul 30, 2007 - 5:30 p.m.
CVE-2007-4085
cve-2007-4085
sql injection
alstrasoft askme pro
security vulnerability
nvd
8.9 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
52.3%
Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands via the (1) que_id parameter to forum_answer.php or (2) the cat_id parameter to search.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| alstrasoft:askme_pro | alstrasoft askme pro | eq | * |
Related
prion
prion
Sql injection
2007-07-30 17:30:00
Sql injection
2008-06-30 18:24:00
cve
cve
CVE-2008-2902
2008-06-30 18:24:00
8.9 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
52.3%
Related for CVE-2007-4085