CVE-2010-0752

Published: Feb 27, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The week_post_page function in the Weekly Archive by Node Type module 6.x before 6.x-2.7 for Drupal does not properly implement node access restrictions when constructing SQL queries, which allows remote attackers to read restricted node listings via unspecified vectors.

Affected (10)

Products: Earl Dunovant: Week

Earl Dunovant

1 product

Week

Configuration A

10 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Earl Dunovant Week	Version 6.x-1.0
Earl Dunovant Week	Version 6.x-1.x-dev
Earl Dunovant Week	Version 6.x-2.0
Earl Dunovant Week	Version 6.x-2.1
Earl Dunovant Week	Version 6.x-2.2
Earl Dunovant Week	Version 6.x-2.3
Earl Dunovant Week	Version 6.x-2.4
Earl Dunovant Week	Version 6.x-2.5
Earl Dunovant Week	Version 6.x-2.6
Earl Dunovant Week	Version 6.x-2.x-dev