EUVD-2007-4477

Malware in sbrugna...

CVE-2007-4494

The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks...

CVE-2007-4494

The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks...

Code injection

The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks...

CVE-2007-4494

The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks...

CVE-2007-4494

The CVE-2007-4494 entry concerns eZ Publish: the tipafriend function in releases before 3.8.9 and before 3.9.3 does not restrict access for anonymous users, enabling remote spam attacks. The vulnerability is tied to insufficient access control rather than an explicit exploit described in the prov...

CVE-2007-4494: Undefined Security Weakness

The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks...