myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to remove arbitrary user accounts via a modified userid parameter without specifying any additional fields.
References
Configurations
Information
Published : 2009-05-18 05:00
Updated : 2017-09-28 18:34
NVD link : CVE-2009-1665
Mitre link : CVE-2009-1665
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
easy-scripts
- answer_and_question_script