= 4.0
whatsns 4.0 allows index.php?question/ajaxadd.html title SQL injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.