← Database

CVE-2008-2902

HIGH CVSS: 7.5 Published: 2008-06-30 Modified: 2026-06-16

Description

SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: The que_id parameter to forum_answer.php is already covered by CVE-2007-4085.

Affected Platforms

Alstrasoft Askme Pro

Weakness Type

CWE-89

References