The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks...
5CVSS5.9AI score0.0168EPSS
SaveExploits0References1
Cvelist•added 2007/08/23 1:0 a.m.•34 views
CVE-2007-4494
The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks...
