CVE-2010-0752: Earl Dunovant Week

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The week_post_page function in the Weekly Archive by Node Type module 6.x before 6.x-2.7 for Drupal does not properly implement node access restrictions when constructing SQL queries, which allows remote attackers to read restricted node listings via unspecified vectors.

Affected products

• Earl Dunovant Week: version 6.x-1.0 only; version 6.x-1.x-dev only; version 6.x-2.0 only; version 6.x-2.1 only; version 6.x-2.2 only; version 6.x-2.3 only; …

Published 2010-02-27. Last modified 2026-06-16.