Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2007-4083

Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to search.php or the (2) typ parameter to register.php.

CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Alstrasoft
Products
Askme Pro
CVE-2007-4085

Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands via the (1) que_id parameter to forum_answer.php or (2) the cat_id parameter to search.php.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Alstrasoft
Products
Askme Pro
CVE-2008-2857

AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.

CVSS 2.0 · 5.0 Medium EPSS 2.1% KEV · Not listed
Vendors
Alstrasoft
Products
Askme
CVE-2008-2902

SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: The que_id parameter to forum_answer.php is already covered by CVE-2007-4085.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Alstrasoft
Products
Askme Pro