CVE-2009-1655

CVE-2009-1655 describes multiple SQL injection vulnerabilities in the myaccount.php script of Easy Scripts Answer and Question Script. Authenticated attackers can exploit these flaws by injecting malicious SQL commands into the 'userid' and 'password' parameters. With a CVSS score of 6.5, this vulnerability is of medium severity, allowing for partial compromise of confidentiality, integrity, and availability with low attack complexity. While there is no evidence of active exploitation or Metasploit modules, an exploit is publicly available on ExploitDB, and community discussion and media coverage are minimal.