CVE-2010-0752
Published Feb 27, 2010
Last updated 7 years ago
Overview
- Description
- The week_post_page function in the Weekly Archive by Node Type module 6.x before 6.x-2.7 for Drupal does not properly implement node access restrictions when constructing SQL queries, which allows remote attackers to read restricted node listings via unspecified vectors.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[ { "nodes": [ { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "393E890A-C1F1-4302-9C1C-11F6009A7303" }, { "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-1.x-dev:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D399FD07-CB2B-4098-A0BE-3C9B1C05A700" }, { "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C425964B-256C-4B8C-8D3C-536E1873F217" }, { "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA45D4DC-7442-4DD0-BB06-AA161543AFC5" }, { "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11A866FA-A57D-408C-9943-F4195C734F26" }, { "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEB302A3-E6F4-4327-8CA8-B12491669535" }, { "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E6ACD25-FA26-4D04-A995-765B4D9BB013" }, { "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A405AB16-1B49-46FA-99B6-C4F39B9C6D08" }, { "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E8B3B00-5CD4-4C5F-94D1-E2DF86C82CE2" }, { "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-2.x-dev:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4E94681-F440-4939-96E3-2C9F22ACAD97" } ], "operator": "OR" }, { "negate": false, "cpeMatch": [ { "criteria": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "799CA80B-F3FA-4183-A791-2071A7DA1E54" } ], "operator": "OR" } ], "operator": "AND" } ]