Incorrect Access Control

Mediawiki uses incorrect access control. It allows a spammer to send out unblockable or rate uncontrollable spam by using Special:ChangeEmail...