Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ez ez publish vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2008-6844
The registration view (/user/register) in eZ Publish 3.5.6 and previous versions, and possibly other versions prior to 3.9.5, 3.10.1, and 4.0.1, allows remote malicious users to gain privileges as other users via modified ContentObjectAttribute_data_user_login_30, ContentObjectAt...
Ez Ez Publish 3.4.8Ez Ez Publish 3.5.4Ez Ez Publish 3.5.5Ez Ez Publish 3.6.5Ez Ez Publish 3.6.2Ez Ez Publish 3.8.9Ez Ez Publish 3.9.4Ez Ez Publish 3.10Ez Ez Publish 3.9.2Ez Ez Publish 3.6.1Ez Ez Publish 3.5.7Ez Ez Publish 3.7.3Ez Ez Publish 3.7.0Ez Ez Publish 4.0Ez Ez Publish 3.8.8Ez Ez Publish 3.6.0Ez Ez Publish 3.6.3Ez Ez Publish 3.7.2Ez Ez Publish 3.9.1Ez Ez PublishEz Ez Publish 3.5.8Ez Ez Publish 3.6.4
5
CVSSv2
CVE-2005-4854
eZ publish 3.5 up to and including 3.7 prior to 20050830 does not use a folder's read permissions to restrict notifications, which allows remote authenticated users to obtain sensitive information about changes to content in arbitrary folders.
Ez Ez Publish 3.5.2Ez Ez Publish 3.5.3Ez Ez Publish 3.5.4Ez Ez Publish 3.5.5Ez Ez Publish 3.6.6Ez Ez Publish 3.6.7Ez Ez Publish 3.6.8Ez Ez Publish 3.6.9Ez Ez Publish 3.6.1Ez Ez Publish 3.6.10Ez Ez Publish 3.6.11Ez Ez Publish 3.6.12Ez Ez Publish 3.7.12Ez Ez Publish 3.7.2Ez Ez Publish 3.7.3Ez Ez Publish 3.7.4Ez Ez Publish 3.5.1Ez Ez Publish 3.5.11Ez Ez Publish 3.5.6Ez Ez Publish 3.5.8Ez Ez Publish 3.6.0Ez Ez Publish 3.6.2
4
CVSSv2
CVE-2005-4857
eZ publish 3.5 prior to 3.5.7, 3.6 prior to 3.6.5, 3.7 prior to 3.7.3, and 3.8 prior to 20051128 allows remote authenticated users to cause a denial of service (Apache httpd segmentation fault) via a request to content/advancedsearch.php with an empty SearchContentClassID paramet...
Ez Ez Publish 3.5.0Ez Ez Publish 3.5.1Ez Ez Publish 3.7.2Ez Ez PublishEz Ez Publish 3.5.6Ez Ez Publish 3.6.0Ez Ez Publish 3.6.1Ez Ez Publish 3.6.2Ez Ez Publish 3.5.2Ez Ez Publish 3.5.4Ez Ez Publish 3.6.4Ez Ez Publish 3.7.1Ez Ez Publish 3.5.3Ez Ez Publish 3.5.5Ez Ez Publish 3.6.3Ez Ez Publish 3.7.0
4.3
CVSSv2
CVE-2006-0938
Cross-site scripting (XSS) vulnerability in eZ publish 3.7.3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the RefererURL parameter.
Ez Ez Publish 3.5.5Ez Ez Publish 3.5.6Ez Ez Publish 3.5.7Ez Ez Publish 3.6.5Ez Ez Publish 3.7.0Ez Ez Publish 3.6.1Ez Ez Publish 3.6.2Ez Ez PublishEz Ez Publish 3.5.8Ez Ez Publish 3.6.0Ez Ez Publish 3.7.1Ez Ez Publish 3.7.2Ez Ez Publish 3.4.8Ez Ez Publish 3.5.4Ez Ez Publish 3.6.3Ez Ez Publish 3.6.4
5
CVSSv2
CVE-2005-4856
The admin interface in eZ publish 3.5 prior to 3.5.7, 3.6 prior to 3.6.5, 3.7 prior to 3.7.3, and 3.8 prior to 20051110 does not properly handle authorization errors, which allows remote malicious users to obtain sensitive information and see the admin pagelayout and associated t...
Ez Ez Publish 3.5.0Ez Ez Publish 3.5.1Ez Ez Publish 3.7.2Ez Ez PublishEz Ez Publish 3.5.6Ez Ez Publish 3.6.0Ez Ez Publish 3.6.1Ez Ez Publish 3.6.2Ez Ez Publish 3.5.3Ez Ez Publish 3.5.5Ez Ez Publish 3.6.3Ez Ez Publish 3.7.0Ez Ez Publish 3.5.2Ez Ez Publish 3.5.4Ez Ez Publish 3.6.4Ez Ez Publish 3.7.1
4.3
CVSSv2
CVE-2010-2671
Cross-site scripting (XSS) vulnerability in advancedsearch.php in eZ Publish 3.7.0 up to and including 4.2.0 allows remote malicious users to inject arbitrary web script or HTML via the subTreeItem parameter.
Ez Ez Publish 3.7.6Ez Ez Publish 3.7.7Ez Ez Publish 3.7.8Ez Ez Publish 3.7.9Ez Ez Publish 3.7.0Ez Ez Publish 3.7.4Ez Ez Publish 3.7.11Ez Ez Publish 4.2.0Ez Ez Publish 3.7.1Ez Ez Publish 3.7.2Ez Ez Publish 3.7.3Ez Ez Publish 3.7.5Ez Ez Publish 3.7.10Ez Ez Publish 3.7.12
7.5
CVSSv2
CVE-2010-2672
Multiple SQL injection vulnerabilities in eZ Publish 3.7.0 up to and including 4.2.0 allow remote malicious users to execute arbitrary SQL commands via the (1) SectionID and (2) SearchTimestamp parameters to the search feature and the (3) SearchContentClassAttributeID parameter t...
Ez Ez Publish 3.7.0Ez Ez Publish 3.7.3Ez Ez Publish 3.7.4Ez Ez Publish 3.7.6Ez Ez Publish 4.2.0Ez Ez Publish 3.7.2Ez Ez Publish 3.7.8Ez Ez Publish 3.7.9Ez Ez Publish 3.7.10Ez Ez Publish 3.7.11Ez Ez Publish 3.7.5Ez Ez Publish 3.7.7Ez Ez Publish 3.7.12Ez Ez Publish 3.7.1
7.5
CVSSv2
CVE-2012-1565
Unspecified vulnerability in ez Publish 4.1.4, 4.2, 4.3, 4.4, 4.5, and 4.6 has unknown impact and attack vectors related to an insecure direct object reference.
Ez Ez Publish 4.6.0Ez Ez Publish 4.2.0Ez Ez Publish 4.3.0Ez Ez Publish 4.4.0Ez Ez Publish 4.5.0Ez Ez Publish 4.1.4
9.4
CVSSv2
CVE-2005-4853
The default configuration of the forum package in eZ publish 3.5 prior to 3.5.5, 3.6 prior to 3.6.2, 3.7 prior to 3.7.0rc2, and 3.8 prior to 20050818 does not restrict edit permissions to a posting's owner, which allows remote authenticated users to edit arbitrary postings.
Ez Ez Publish 3.5.0Ez Ez Publish 3.5.1Ez Ez Publish 3.5.2Ez Ez Publish 3.5.3Ez Ez Publish 3.5.4
5
CVSSv2
CVE-2007-4494
The tipafriend function in eZ publish prior to 3.8.9, and 3.9 prior to 3.9.3, does not limit access by anonymous users, which allows remote malicious users to conduct spam attacks.
Ez Ez Publish 3.9.1Ez Ez Publish 3.9.2Ez Ez PublishEz Ez Publish 3.9.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook