Vulnerability in Easy-Scripts Answer And Question Script
CVE-2009-1663
Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads/[username] directory.
EPSS: 0.029 (85.3th percentile) — read the EPSS interpretation.
Affected products
- Easy-scripts Answer_and_question_script
- N/a — versions n/a
References
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)