CVE-2009-1655

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-05-16 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remote authenticated users to execute arbitrary SQL commands via the (1) user name (userid parameter) and (2) password.

Affected products

Easy-Scripts Answer And Question Script: all versions

References

http://osvdb.org/54502
http://secunia.com/advisories/35067
http://www.securityfocus.com/bid/34975
https://www.exploit-db.com/exploits/8690
http://osvdb.org/54502
http://secunia.com/advisories/35067
http://www.securityfocus.com/bid/34975
https://www.exploit-db.com/exploits/8690

Get alerted when CVE-2009-1655 or the next vulnerability affects your stack