5

CVE-2007-4494

The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ez ≫ Ez Publish Version <= 3.8.8
Ez ≫ Ez Publish Version3.9.0
Ez ≫ Ez Publish Version3.9.1
Ez ≫ Ez Publish Version3.9.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.68% 0.739
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://ez.no/community/news/ez_publish_security_fixes_3_9_3_and_3_8_9
http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_8_8_to_3_8_9
http://ez.no/download/ez_publish/changelogs/ez_publish_3_9/changelog_3_9_2_to_3_9_3
Patch
http://secunia.com/advisories/26686
http://osvdb.org/40325
http://www.securityfocus.com/bid/25538