4
CVE-2006-7218
- EPSS 0.98%
- Veröffentlicht 06.07.2007 19:30:00
- Zuletzt bearbeitet 16.06.2026 22:34:36
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LogineZ publish before 3.8.1 does not properly enforce permissions for "content edit Language" when there are four or more languages, which allows remote authenticated users to perform translations into languages that are not listed in a Module Function Limitation policy.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ez ≫ Ez Publish Version <= 3.8.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.98% | 0.577 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:N/I:P/A:N
|
http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_8_0_to_3_8_1
http://ez.no/download/ez_publish/changelogs/ez_publish_3_9/changelog_3_8_0_to_3_9_0
http://issues.ez.no/8539