answer and question script vulnerabilities and fixes

Recent CVEs affecting answer and question script, with upgrade or downgrade steps. 5 tracked.

Also searched as: answerandquestionscript.

answer and question script has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-05-18. Highest priority: CVE-2009-1664 (score 52/100).

• CVE-2009-1665 MEDIUM 6.4 MITIGATE myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to remove arbitrary user acco
• CVE-2009-1664 HIGH 7.5 MITIGATE myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing
• CVE-2009-1663 MEDIUM 6.8 MITIGATE Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remo
• CVE-2009-1655 MEDIUM 6.5 MITIGATE Multiple SQL injection vulnerabilities in myaccount.php in Easy Scripts Answer and Question Script allow remot
• CVE-2009-1654 MEDIUM 4.3 MITIGATE Cross-site scripting (XSS) vulnerability in questiondetail.php in Easy Scripts Answer and Question Script allo

FAQ

How do I fix answer and question script vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is answer and question script being exploited right now?

None of the tracked answer and question script CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which answer and question script CVE should I patch first?

CVE-2009-1664 currently ranks highest (52/100): myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing.

RSS feed for answer and question script · ← Back to latest CVEs