CVE-2007-4493

CVE-2007-4493 describes a critical vulnerability in eZ publish versions prior to 3.8.9 and 3.9.3, specifically related to insufficient permission checks on module views without a defined policy function. This flaw, demonstrated in the shop module's discount functionality, carries a CVSS score of 10.0, indicating a severe risk with network-based attack vectors, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its critical severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old vulnerability.