PT-2010-4194 · Ez Systems · Ez Publish

Publicado 2010-07-08 · Atualizado 2010-07-09 · CVE-2010-2672

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions eZ Publish versions 3.7.0 through 4.2.0

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the SectionID and SearchTimestamp parameters to the "search" feature and the SearchContentClassAttributeID parameter to the "advancedsearch" feature.

Recommendations For versions 3.7.0 through 4.2.0, consider restricting access to the search and advanced search features until a fix is available. As a temporary workaround, avoid using the SectionID, SearchTimestamp, and SearchContentClassAttributeID parameters in the affected features.

Correção

RCE

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2010-2672

Produtos afetados

Ez Publish

Referências · 10

• http://ez.no/de/developer/security/security_advisories/ez_publish_4_2/ezsa_2010_001_remote_vulnerability_in_ez_search · Aviso do Fabricante
• http://securityfocus.com/bid/38985 · Nota
• http://osvdb.org/63237 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2672 · Nota de Segurança
• http://ez.no/de/content/download/321165/3192248/version/1/file/16397.diff · Correção
• http://siberas.de/advisories/advisories_2010.html · Nota
• http://ez.no/de/content/download/321166/3192253/version/1/file/16398.diff · Correção
• http://secunia.com/advisories/39101 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2672 · Nota
• http://osvdb.org/63238 · Nota