CVE-2008-6844

Published: Jul 2, 2009Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The registration view (/user/register) in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttribute_data_user_login_30, ContentObjectAttribute_data_user_password_30, and other parameters.

Affected (24)

Products: Ez: Ez Publish

1 product

Ez Publish

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Ez Ez Publish	Up to 3.5.6
Ez Ez Publish	Version 3.10
Ez Ez Publish	Version 3.4.8
Ez Ez Publish	Version 3.5.4
Ez Ez Publish	Version 3.5.5
Ez Ez Publish	Version 3.5.7
Ez Ez Publish	Version 3.5.8
Ez Ez Publish	Version 3.6.0
Ez Ez Publish	Version 3.6.1
Ez Ez Publish	Version 3.6.2
Ez Ez Publish	Version 3.6.3
Ez Ez Publish	Version 3.6.4
Ez Ez Publish	Version 3.6.5
Ez Ez Publish	Version 3.7.0
Ez Ez Publish	Version 3.7.1
Ez Ez Publish	Version 3.7.2
Ez Ez Publish	Version 3.7.3
Ez Ez Publish	Version 3.8.8
Ez Ez Publish	Version 3.8.9
Ez Ez Publish	Version 3.9.0
Ez Ez Publish	Version 3.9.1
Ez Ez Publish	Version 3.9.2
Ez Ez Publish	Version 3.9.4
Ez Ez Publish	Version 4.0