Approved changes feed: RSS · Atom

cpe:2.3:a:ez:ez_publish-legacy:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEz (7b59e160-3d8c-59e2-a2ad-e6730c6f4258)
ProductEz Publish Legacy (5e682780-694b-5971-b088-6aa379161d34)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ezsystems/ezpublish-legacy purl2cpe 2026-06-01 10:12:39.048171

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10806 vulnerable 2026-06-08 05:16:35.913999 Details available
eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution.
Published: 2020-03-22T15:34:08.000Z
Updated: 2024-08-04T11:14:15.514Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.