CVE-2007-4494

The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks.

Link	Resource
http://ez.no/community/news/ez_publish_security_fixes_3_9_3_and_3_8_9
http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_8_8_to_3_8_9
http://ez.no/download/ez_publish/changelogs/ez_publish_3_9/changelog_3_9_2_to_3_9_3	Patch
http://www.securityfocus.com/bid/25538
http://secunia.com/advisories/26686
http://osvdb.org/40325

Configuration 1

cpe:2.3:a:ez:ez_publish:*:*:*:*:*:*:*:* cpe:2.3:a:ez:ez_publish:3.9.0:*:*:*:*:*:*:* cpe:2.3:a:ez:ez_publish:3.9.2:*:*:*:*:*:*:* cpe:2.3:a:ez:ez_publish:3.9.1:*:*:*:*:*:*:*

---

Published : 2007-08-23 01:17

Updated : 2015-07-27 06:36

---

NVD link : CVE-2007-4494

Mitre link : CVE-2007-4494

Ez

Ez Publish

NVD-CWE-noinfo