CVE-2005-4853

CVE-2005-4853 affects the forum package in eZ publish. In default configurations, edit permissions are not restricted to the posting’s owner, allowing remote authenticated users to edit arbitrary postings. Affected versions are: eZ publish 3.5 before 3.5.5; 3.6 before 3.6.2; 3.7 before 3.7.0rc2; ...

CVE-2005-4857

CVE-2005-4857 affects eZ publish multiple versions (3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128). The vulnerability allows remote authenticated users to cause a denial of service by sending a request to content/advancedsearch.php with an empty SearchContentClassI...

CVE-2006-7218

eZ publish before 3.8.1 does not properly enforce permissions for "content edit Language" when there are four or more languages, which allows remote authenticated users to perform translations into languages that are not listed in a Module Function Limitation policy...

CVE-2005-4855

CVE-2005-4855 affects eZ publish prior to specific versions: 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050922. The issue is an unrestricted file upload that does not restrict Image datatype uploads to image content types, allowing remote authenticated users to uplo...

CVE-2005-4856

The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051110 does not properly handle authorization errors, which allows remote attackers to obtain sensitive information and see the admin pagelayout and associated templates via a request with 1...

CVE-2005-4857

eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows remote authenticated users to cause a denial of service Apache httpd segmentation fault via a request to content/advancedsearch.php with an empty SearchContentClassID parameter, reportedly related to a...

CVE-2005-4855

Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050922 does not restrict Image datatype uploads to image content types, which allows remote authenticated users to upload certain types of files, as demonstrated by .js...

CVE-2006-7219

The CVE concerns eZ Publish before 3.8.5 where permissions for editing in a specific language are not properly enforced. This allows remote authenticated users to create a draft in an unauthorized language by editing an archived version of an object, then using Manage Versions to copy that versio...

CVE-2006-7218

The CVE concerns eZ Publish prior to 3.8.1. The vulnerability arises from improper enforcement of permissions for the “content edit Language” operation when four or more languages are present, allowing remote authenticated users to perform translations into languages not listed in a Module Functi...

CVE-2006-7219

eZ publish before 3.8.5 does not properly enforce permissions for editing in a specific language, which allows remote authenticated users to create a draft in an unauthorized language by editing an archived version of an object, and then using Manage Versions to copy this version to a new draft...

CVE-2005-4854

eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict notifications, which allows remote authenticated users to obtain sensitive information about changes to content in arbitrary folders...

CVE-2005-4852

The siteaccess URIMatching implementation in eZ publish 3.5 through 3.8 before 20050812 converts all non-alphanumeric characters in a URI to '' underscore, which allows remote attackers to bypass access restrictions by inserting certain characters in a URI, as demonstrated by a request for...

CVE-2005-4850

eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to submit data, which allows remote attackers to edit data submitted by arbitrary anonymous users...

CVE-2005-4854

CVE-2005-4854 affects eZ publish versions 3.5–3.7 prior to 2005-08-30. The root cause is that a folder’s read permissions are not used to restrict notifications, allowing remote authenticated users to view sensitive information about changes to content in arbitrary folders. The connected sources ...

CVE-2005-4851

CVE-2005-4851 affects eZ publish versions 3.4.4–3.7 prior to 2005-07-22. The issue arises from permissions handling at the node level, which allows remote authenticated users to bypass original permissions on embedded objects in XML fields and read those objects. Documented impact is reading of e...

CVE-2005-4852

The CVE describes a vulnerability in eZ Publish core (siteaccess URIMatching) affecting versions 3.5–3.8 prior to 20050812, where all non-alphanumeric URI characters are replaced with underscores. This allows remote attackers to bypass access restrictions by crafting URIs such as /admin:de, which...

CVE-2005-4853

The default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050818 does not restrict edit permissions to a posting's owner, which allows remote authenticated users to edit arbitrary postings...

CVE-2005-4851

eZ publish 3.4.4 through 3.7 before 20050722 applies certain permissions on the node level, which allows remote authenticated users to bypass the original permissions on embedded objects in XML fields and read these objects...

CVE-2005-4854: Undefined Security Weakness

eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict notifications, which allows remote authenticated users to obtain sensitive information about changes to content in arbitrary folders...

CVE-2005-4857: Undefined Security Weakness

eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows remote authenticated users to cause a denial of service Apache httpd segmentation fault via a request to content/advancedsearch.php with an empty SearchContentClassID parameter, reportedly related to a...