10
CVE-2007-4493
- EPSS 0.55%
- Veröffentlicht 23.08.2007 01:17:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LogineZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has unknown impact and attack vectors, as demonstrated by a vulnerability in the discount functionality in the shop module.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ez ≫ Ez Publish Version <= 3.8.8
Ez ≫ Ez Publish Version3.9.0
Ez ≫ Ez Publish Version3.9.1
Ez ≫ Ez Publish Version3.9.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.55% | 0.654 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|