medium6.5Public exploit code
CVE-2009-1655
Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remote authenticated users to execute arbitrary SQL co…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Easy Scripts Answer and Question Script - Multiple Vulnerabilities2009-05-14 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remote authenticated users to execute arbitrary SQL commands via the (1) user name (userid parameter) and (2) password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easy-Scripts | Answer And Question Script | All versions |