CVE-2007-4494

Description

The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks.

References

http://www.securityfocus.com/bid/25538

http://secunia.com/advisories/26686

http://osvdb.org/40325

http://ez.no/download/ez_publish/changelogs/ez_publish_3_9/changelog_3_9_2_to_3_9_3

http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_8_8_to_3_8_9

http://ez.no/community/news/ez_publish_security_fixes_3_9_3_and_3_8_9

Details

Source: Mitre, NVD

Risk Information

CVSS v2

EPSS