Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
ezsystems/ezpublish-legacy
Composer
· Package
11 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
ezsystems/ezpublish-legacy has a SQL injection in dfscleanup
CVE-2026-38739 · GHSA-XG9X-H37W-H3R3
ezsystems/ezpublish-legacy
Composer
High
No fix reported
2026-09-10
eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type
CVE-2020-10806 · GHSA-54P5-GXQ6-J98G
ezsystems/ezpublish-kernel
ezsystems/ezpublish-legacy
Composer
Critical
Fix reported
2024-12-08
Content object state fetch functions open to SQL injection
GHSA-JPWX-FFJQ-WR4W · PKSA-N31W-WZC4-ZW3B
Version ranges need review.
ezsystems/ezpublish-legacy
Composer
High
Fix reported
2024-12-02
Ez Platform and Legacy are prone to an insecure interpretation of PHP/PHAR uploads
GHSA-PQJM-XCP8-WGMM · PKSA-H4DS-XJ4T-XWQP
Version ranges need review.
ezsystems/ezpublish-legacy
Composer
Medium
Fix reported
2024-11-29
eZ Publish Information disclosure in backend content tree menu
GHSA-CC2J-92JQ-WGJG
ezsystems/ezpublish-legacy
Composer
High
Fix reported
2024-11-29
eZ Publish Legacy Patch EZSA-2018-001 for Several vulnerabilities
GHSA-82RV-45PC-V28W · PKSA-21ZV-ZMV6-8DJW
Version ranges need review.
ezsystems/ezpublish-legacy
Composer
High
Fix reported
2024-11-29
EZsystems Remote code execution in file uploads
GHSA-9895-26WR-4FGV · PKSA-PYCK-SRWW-RJVT
Version ranges need review.
ezsystems/ezpublish-legacy
Composer
High
Fix reported
2024-11-29
eZ Publish Legacy Passwordless login for LDAP users
GHSA-P9MP-VQ4V-V5M5 · PKSA-8ZQW-67XM-DJP1
Version ranges need review.
ezsystems/ezpublish-legacy
Composer
High
Fix reported
2024-11-29
eZ Publish Legacy Cross-site Scripting (XSS) in 'disabled module' error template
GHSA-2VH3-CJ9J-MCJ5 · PKSA-4HQB-7WXF-8QRS
Version ranges need review.
ezsystems/ezpublish-legacy
Composer
Medium
Fix reported
2024-11-29
Ez Platform Object Injection in legacy shop module
GHSA-39J2-4P9J-5W4J · PKSA-12D4-FCMC-WS8V
Version ranges need review.
ezsystems/ezpublish-legacy
Composer
Medium
Fix reported
2024-11-29
eZ Publish Cross-site Scripting (XSS) vulnerability
CVE-2017-1000431 · GHSA-M98Q-P5GQ-Q5FF
Version ranges need review.
ezsystems/ezpublish-legacy
Composer
Medium
Fix reported
2024-04-26
