cbcvebase.
CVE-2010-2672
published 2010-07-08

CVE-2010-2672: Multiple SQL injection vulnerabilities in eZ Publish 3.7.0 through 4.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) SectionID and (2)…

PriorityP340high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.33%
67.5th percentile
Multiple SQL injection vulnerabilities in eZ Publish 3.7.0 through 4.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) SectionID and (2) SearchTimestamp parameters to the search feature and the (3) SearchContentClassAttributeID parameter to the advancedsearch feature.

Affected

14 ranges
VendorProductVersion rangeFixed in
ezez_publish——
ezez_publish——
ezez_publish——
ezez_publish——
ezez_publish——
ezez_publish——
ezez_publish——
ezez_publish——
ezez_publish——
ezez_publish——
ezez_publish——
ezez_publish——
ezez_publish——
ezez_publish——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.