Filtered by vendor Alstrasoft Subscriptions
Filtered by product Askme Pro Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2008-2902 1 Alstrasoft 1 Askme Pro 2024-11-21 N/A
SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: The que_id parameter to forum_answer.php is already covered by CVE-2007-4085.
CVE-2007-4085 1 Alstrasoft 1 Askme Pro 2024-11-21 N/A
Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands via the (1) que_id parameter to forum_answer.php or (2) the cat_id parameter to search.php.
CVE-2007-4083 1 Alstrasoft 1 Askme Pro 2024-11-21 N/A
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to search.php or the (2) typ parameter to register.php.