Security Advisory
CVE-2007-4494
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote attackers to conduct spam attacks.