Easy Scripts

easy-scripts

5 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Answer And Question Script

answer_and_question_script

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-1665 1Easy Scripts 1Answer And Question Script Apr 23, 2026 May 18, 2009 N/A· v4 N/A· v3 6.4 MEDIUM· v2 myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to remove arbitrary user accounts via a modified userid parameter without specifying any additional fields.
CVE-2009-1664 1Easy Scripts 1Answer And Question Script Apr 23, 2026 May 18, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via modifi...Show more myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via modified userid, txtpassword, and txtRpassword parameters.Show less
CVE-2009-1663 1Easy Scripts 1Answer And Question Script Apr 23, 2026 May 18, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via...Show more Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads/[username] directory.Show less
CVE-2009-1655 1Easy Scripts 1Answer And Question Script Apr 23, 2026 May 16, 2009 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remote authenticated users to execute arbitrary SQL commands via the (1) user name (userid parameter) and (2) passw...Show more Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remote authenticated users to execute arbitrary SQL commands via the (1) user name (userid parameter) and (2) password.Show less
CVE-2009-1654 1Easy Scripts 1Answer And Question Script Apr 23, 2026 May 16, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in questiondetail.php in Easy Scripts Answer and Question Script allows remote attackers to inject arbitrary web script or HTML via the questionid parameter.