CVE-2009-1664

Easy-scripts Answer And Question Script - Authentication Bypass

Title source: rule

Description

myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via modified userid, txtpassword, and txtRpassword parameters.

Exploits (1)

exploitdb WORKING POC VERIFIED

by InjEctOr5 · textwebappsphp

https://www.exploit-db.com/exploits/8690

View Code ZIP pw:eip

References (1)

Core 1

Core References

Exploit, Third Party Advisory exploit x_refsource_exploit-db

https://www.exploit-db.com/exploits/8690

Scores

EPSS 0.0253

EPSS Percentile 85.5%

Details

CWE

CWE-287

Status published

Products (1)

easy-scripts/answer_and_question_script

Published May 18, 2009

Tracked Since Feb 18, 2026