CVE-2007-2003 in InoutMailingListManager

الملخص

بحسب MITRE

InoutMailingListManager 3.1 and earlier sends a Location redirect header but does not exit after an authorization check fails, which allows remote attackers to access certain restricted functionality, and upload and execute arbitrary PHP code, by ignoring the redirect.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• حجز: 12/04/2007
• إفشاء: 12/04/2007
• الاعتدال: تمت الموافقة
• إدخال: VDB-36145
• CPE: جاهز
• CWE: CWE-601 (غير مؤكد)
• استغلال: تحميل
• CVSS: 6.8 (NVD)
• EPSS: 0.06244
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-2003
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-2003
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-2003/