CVE:CVE-2009-1664
CNNVD:CNNVD-200905-225
Easy Scripts Answer 和 Question Script 的myaccount.php没有在更改密码前校验原始密码，这会允许远程攻击者可以借助更改过的useid，txtpassword,以及txtRpassword参数，更改其他用户的密码并获得特权。
solution:Upgrade easy-scripts answer_and_question_script to a higher version than *