CVE-2007-4085

CVE-2007-4085 affects AlstraSoft AskMe Pro (multiple SQL injection flaws). The vulnerabilities allow remote attackers to manipulate SQL via 1) que_id in forum_answer.php and 2) cat_id in search.php. Root cause: unsafely constructed SQL queries leading to arbitrary command execution. Evidence from...

CVE-2008-2902

AlstraSoft AskMe Pro (

CVE-2007-4083

CVE-2007-4083 affects AlstraSoft AskMe Pro. The documented vulnerabilities are multiple XSS flaws exploited via user-supplied input: (1) cat_id in search.php and (2) typ in register.php. Remote attackers could inject arbitrary script/HTML, leading to client-side compromise. The sources provide th...