VULNERABILITY INTELLIGENCE
CVE-2009-1664
CVSS score7.5 HIGH
EPSS probability2.05%
CISA KEVNot currently listed
Published2009-05-18
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via modified userid, txtpassword, and txtRpassword parameters.
Weakness classification
- CWE-287: Improper Authentication