CVE:CVE-2009-1655
CNNVD:CNNVD-200905-212
Easy Scripts Answer 和 Question Script的myaccount.php中存在多个SQL注入漏洞。远程认证用户可以借助(1)用户名(userid参数)和(2)密码，执行任意SQL指令。
solution:Upgrade easy-scripts answer_and_question_script to a higher version than *