CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.5
CWE Name:  Permissions Privileges and Access Controls
Summary: the registration view (/user/register) in ez publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified contentobjectattribute_data_user_login_30, contentobjectattribute_data_user_password_30, and other parameters.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2009-07-02
Last Modified Date: 2017-09-29