« Volver al listado

CVE-2010-0752

Estado: ModificadaMedia (5)—

The week_post_page function in the Weekly Archive by Node Type module 6.x before 6.x-2.7 for Drupal does not properly implement node access restrictions when constructing SQL queries, which allows remote attackers to read restricted node listings via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Earl Dunovant — Week

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-0752",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-02-27T00:30:00.463",
  "references": [
    {
      "url": "http://drupal.org/node/723776",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://drupal.org/node/724286",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/62565",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/38717",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/38397",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56504",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://drupal.org/node/723776",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://drupal.org/node/724286",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/62565",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/38717",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/38397",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56504",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The week_post_page function in the Weekly Archive by Node Type module 6.x before 6.x-2.7 for Drupal does not properly implement node access restrictions when constructing SQL queries, which allows remote attackers to read restricted node listings via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "La función week_post_page en Weekly Archive para el módulo Node Type v6.x anteriores v6.x-2.7 para Drupal no implementa de forma adecuada las restricciones de acceso al nodo cuando construyen preguntas SQL, lo que permite a atacantes remotos para leer listados de nodo restringidos a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:16:46.860",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "393E890A-C1F1-4302-9C1C-11F6009A7303"
            },
            {
              "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-1.x-dev:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D399FD07-CB2B-4098-A0BE-3C9B1C05A700"
            },
            {
              "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C425964B-256C-4B8C-8D3C-536E1873F217"
            },
            {
              "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EA45D4DC-7442-4DD0-BB06-AA161543AFC5"
            },
            {
              "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "11A866FA-A57D-408C-9943-F4195C734F26"
            },
            {
              "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EEB302A3-E6F4-4327-8CA8-B12491669535"
            },
            {
              "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E6ACD25-FA26-4D04-A995-765B4D9BB013"
            },
            {
              "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A405AB16-1B49-46FA-99B6-C4F39B9C6D08"
            },
            {
              "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-2.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9E8B3B00-5CD4-4C5F-94D1-E2DF86C82CE2"
            },
            {
              "criteria": "cpe:2.3:a:earl_dunovant:week:6.x-2.x-dev:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4E94681-F440-4939-96E3-2C9F22ACAD97"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "799CA80B-F3FA-4183-A791-2071A7DA1E54"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}