CVE

Id
33019  
CVE No.
CVE-2008-2902  
Status
Candidate  
Description
SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: The que_id parameter to forum_answer.php is already covered by CVE-2007-4085.  
Phase
Assigned (20080630)  
Votes
None (candidate not yet proposed)  
Comments