CVE-2009-1663

Easy-scripts Answer And Question Script - Unrestricted File Upload

Title source: rule

Description

Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads/[username] directory.

Exploits (1)

exploitdb WORKING POC VERIFIED

by InjEctOr5 · textwebappsphp

https://www.exploit-db.com/exploits/8690

View Code ZIP pw:eip

References (1)

Core 1

Core References

Exploit, Third Party Advisory exploit x_refsource_exploit-db

https://www.exploit-db.com/exploits/8690

Scores

EPSS 0.0491

EPSS Percentile 89.6%

Details

Status published

Products (1)

easy-scripts/answer_and_question_script

Published May 18, 2009

Tracked Since Feb 18, 2026