3 matches found
CVE-2007-4085
CVE-2007-4085 affects AlstraSoft AskMe Pro (multiple SQL injection flaws). The vulnerabilities allow remote attackers to manipulate SQL via 1) que_id in forum_answer.php and 2) cat_id in search.php. Root cause: unsafely constructed SQL queries leading to arbitrary command execution. Evidence from...
CVE-2008-2902
AlstraSoft AskMe Pro (
CVE-2007-4083
CVE-2007-4083 affects AlstraSoft AskMe Pro. The documented vulnerabilities are multiple XSS flaws exploited via user-supplied input: (1) cat_id in search.php and (2) typ in register.php. Remote attackers could inject arbitrary script/HTML, leading to client-side compromise. The sources provide th...