CVE-2007-4494

no score yetEPSS 1.7%

ez ez publish: no CVSS score yet. EPSS 1.7% chance of exploitation in the next 30 days.

The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks.

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
Published: 2007-08-23
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ez:ez_publish

References

http://ez.no/community/news/ez_publish_security_fixes_3_9_3_and_3_8_9
http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_8_8_to_3_8_9
http://ez.no/download/ez_publish/changelogs/ez_publish_3_9/changelog_3_9_2_to_3_9_3
http://osvdb.org/40325
http://secunia.com/advisories/26686

Check your stack JSON