CVE-2009-1664: Easy-Scripts Answer And Question Script

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via modified userid, txtpassword, and txtRpassword parameters.

Affected products

• Easy-Scripts Answer And Question Script: any version

Published 2009-05-18. Last modified 2026-06-16.