CVE-2007-2002

InoutMailingListManager 3.1 and earlier allows remote attackers to access certain restricted functionality, and upload and execute arbitrary PHP code, by setting an arbitrary admin cookie.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2007-04-12

Last modified

2024-08-07

Affected products

• Inoutmailinglistmanager (Inoutmailinglistmanager)

References

• http://secunia.com/advisories/24842
• http://www.vupen.com/english/advisories/2007/1345
• https://www.exploit-db.com/exploits/3702