Skip to content

Ez Publish vulnerabilities

ez publish-kernel, publish-legacy +1 moreeZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous TypeCVE-2020-10806Fix available9.8 CriticalMarch 22, 2020
ez publisheZ Publish Cross-site Scripting (XSS) vulnerabilityCVE-2017-1000431Fix available6.1 MediumJanuary 2, 2018
ez publishUnspecified vulnerability in ez Publish 4.1.4, 4.2, 4.3, 4.4, 4.5, and 4.6 has unknown impact and...CVE-2012-15657.5 HighOctober 6, 2012
ez publishCross-site request forgery (CSRF) vulnerability in eZOE flash player in eZ Publish 4.1 through 4...CVE-2012-40536.8 MediumJuly 25, 2012
ez publishMultiple SQL injection vulnerabilities in eZ Publish 3.7.0 through 4.2.0 allow remote attackers...CVE-2010-26727.5 HighJuly 8, 2010
ez publishCross-site scripting (XSS) vulnerability in advancedsearch.php in eZ Publish 3.7.0 through 4.2.0...CVE-2010-26714.3 MediumJuly 8, 2010
ez publishThe registration view (/user/register) in eZ Publish 3.5.6 and earlier, and possibly other...CVE-2008-6844Public exploit7.5 HighJuly 2, 2009
ez publishThe tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access...CVE-2007-44945.0 MediumAugust 23, 2007
ez publisheZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module...CVE-2007-449310.0 HighAugust 23, 2007
ez publisheZ publish before 3.8.5 does not properly enforce permissions for editing in a specific language,...CVE-2006-72194.0 MediumJuly 6, 2007
ez publisheZ publish before 3.8.1 does not properly enforce permissions for "content edit Language" when...CVE-2006-72184.0 MediumJuly 6, 2007
ez publishCross-site scripting (XSS) vulnerability in eZ publish 3.7.3 and earlier allows remote attackers...CVE-2006-09384.3 MediumMarch 1, 2006
ez publisheZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows...CVE-2005-48574.0 MediumDecember 31, 2005
ez publishThe admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8...CVE-2005-48565.0 MediumDecember 31, 2005
ez publishUnrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7...CVE-2005-48553.5 LowDecember 31, 2005
ez publisheZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict...CVE-2005-48545.0 MediumDecember 31, 2005
ez publishThe default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2,...CVE-2005-48539.4 HighDecember 31, 2005
ez publishThe siteaccess URIMatching implementation in eZ publish 3.5 through 3.8 before 20050812 converts...CVE-2005-48525.0 MediumDecember 31, 2005
ez publisheZ publish 3.4.4 through 3.7 before 20050722 applies certain permissions on the node level, which...CVE-2005-48514.0 MediumDecember 31, 2005
ez publisheZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to...CVE-2005-48505.0 MediumDecember 31, 2005
ez publishCross-site scripting (XSS) vulnerability in articleview.php for eZ publish 2.2 allows remote...CVE-2003-0310Public exploit6.8 MediumMay 17, 2003