CVE-2005-4852

The CVE describes a vulnerability in eZ Publish core (siteaccess URIMatching) affecting versions 3.5–3.8 prior to 20050812, where all non-alphanumeric URI characters are replaced with underscores. This allows remote attackers to bypass access restrictions by crafting URIs such as /admin:de, which...