CVE-2009-1664

myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords, which allows remote attackers to…

published May 17, 2009

CVSS
—
EPSS
2%
Percentile
81.0
In the wild
Unconfirmed
What it is

myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via modified userid, txtpassword, and txtRpassword parameters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02046 · 81.0th percentile
Published
2009-05-17T16:00Z
EPSS history
Timeline
  • 17 MAY 16:00Z
    myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords, which allows remote attackers to…
    cvelistv5