The registration view (/user/register) in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttribute_data_user_login_30, ContentObjectAttribute_data_user_password_30, and other parameters.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 7.5 | HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| Hyperlink | Source | Resource |
|---|---|---|
| http://ez.no/developer/security/security_advisories/ez_publish_4_0/ezsa_2008_003_insufficient_form_handling_made_privilege_escalation_possible | cve@mitre.org | Vendor Advisory |
| http://www.osvdb.org/52708 | cve@mitre.org | N/A |
| http://www.securityfocus.com/bid/32762 | cve@mitre.org | Exploit |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/47216 | cve@mitre.org | N/A |
| https://www.exploit-db.com/exploits/7406 | cve@mitre.org | N/A |
| http://ez.no/developer/security/security_advisories/ez_publish_4_0/ezsa_2008_003_insufficient_form_handling_made_privilege_escalation_possible | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |
| http://www.osvdb.org/52708 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.securityfocus.com/bid/32762 | af854a3a-2127-422b-91ae-364da2661108 | Exploit |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/47216 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| https://www.exploit-db.com/exploits/7406 | af854a3a-2127-422b-91ae-364da2661108 | N/A |