Lucene search
MitreCVELIST:CVE-2010-2672HistoryOct 03, 2022 - 4:21 p.m.
CVE-2010-2672
2022-10-0316:21:09
mitre
www.cve.org
sql injection
ez publish
remote attackers
arbitrary commands
search feature
advancedsearch
sectionid
searchtimestamp
searchcontentclassattributeid
Multiple SQL injection vulnerabilities in eZ Publish 3.7.0 through 4.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) SectionID and (2) SearchTimestamp parameters to the search feature and the (3) SearchContentClassAttributeID parameter to the advancedsearch feature.
References
ez.no/de/content/download/321165/3192248/version/1/file/16397.diff
ez.no/de/content/download/321166/3192253/version/1/file/16398.diff
ez.no/de/developer/security/security_advisories/ez_publish_4_2/ezsa_2010_001_remote_vulnerability_in_ez_search
osvdb.org/63237
osvdb.org/63238
secunia.com/advisories/39101
www.securityfocus.com/bid/38985
www.siberas.de/advisories/advisories_2010.html
Related
nvd
nvd
CVE-2010-2672
2010-07-08 22:30:01
cve
cve
CVE-2010-2672
2022-10-03 16:21:09
prion
prion
Sql injection
2010-07-08 22:30:00