Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-1665
HistoryMay 18, 2009 - 12:00 p.m.

CVE-2009-1665

2009-05-1812:00:01
CWE-264
[email protected]
web.nvd.nist.gov
4

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.8

Confidence

High

EPSS

0.003

Percentile

70.6%

JSON

myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to remove arbitrary user accounts via a modified userid parameter without specifying any additional fields.

Affected configurations

Nvd
Node
easy-scriptsanswer_and_question_script
VendorProductVersionCPE
easy-scriptsanswer_and_question_script*cpe:2.3:a:easy-scripts:answer_and_question_script:*:*:*:*:*:*:*:*

Related

cvelist 1
cve 1
prion 1
exploitdb 1
cvelist
cvelist
CVE-2009-1665
2009-05-17 16:00:00
cve
cve
CVE-2009-1665
2009-05-18 12:00:01
prion
prion
Code injection
2009-05-18 12:00:00
exploitdb
exploitdb
Easy Scripts Answer and Question Script - Multiple Vulnerabilities
2009-05-14 00:00:00

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

6.8

Confidence

High

EPSS

0.003

Percentile

70.6%

JSON
Related for NVD:CVE-2009-1665
cvelist1cve1prion1exploitdb1