Approved changes feed: RSS · Atom

cpe:2.3:a:ez:ez_publish-kernel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEz (7b59e160-3d8c-59e2-a2ad-e6730c6f4258)
ProductEz Publish Kernel (b9010daa-ea36-5979-9ba5-5c42e3e8e8d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ezsystems/ezpublish-kernel purl2cpe 2026-06-01 10:12:39.187901

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10806 vulnerable 2026-06-08 05:16:35.913231 Details available
eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to execute arbitrary code by uploading PHP code, unless the vhost configuration permits only app.php execution.
Published: 2020-03-22T15:34:08.000Z
Updated: 2024-08-04T11:14:15.514Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.