CVE-2009-1664

The CVE-2009-1664 entry documents a vulnerability in myaccount.php of Easy Scripts Answer and Question Script where the application does not verify the original password before allowing password changes. This permits an attacker to modify userid, txtpassword, and txtRpassword parameters to change...