CVE-2009-1655 EXPLOIT
6.5
MEDIUM · CVSS 2.0 · EPSS 1.7% (pctl 77)
Patch early
A public exploit exists.
Description
Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remote authenticated users to execute arbitrary SQL commands via the (1) user name (userid parameter) and (2) password.
Scoring
| CVSS | 6.5 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
| EPSS | 1.75% — more likely to be exploited than 77% of all CVEs |
| Weakness | CWE-89 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2009-05-16 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| easy-scripts | answer and question script |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Easy Scripts Answer and Question Script - Multiple Vulnerabilities | 2009-05-14 |
References
→ the Explorer · watch your stack · NVD