CVE-2007-2003 | BDVDB-2026-23473 Detail

Description#

InoutMailingListManager 3.1 and earlier sends a Location redirect header but does not exit after an authorization check fails, which allows remote attackers to access certain restricted functionality, and upload and execute arbitrary PHP code, by ignoring the redirect.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/24842
https://www.exploit-db.com/exploits/3702
http://www.vupen.com/english/advisories/2007/1345

Exploit#

https://www.exploit-db.com/exploits/3702

History#

Version 12007-04-12Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.