vulnwire
6.8med

CVE-2007-20031 exploit

InoutMailingListManager 3.1 and earlier sends a Location redirect header but does not exit after an authorization check fails, which allows…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
6.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.0%
percentile 81%
Public exploits
1
Exploit-DB

InoutMailingListManager 3.1 and earlier sends a Location redirect header but does not exit after an authorization check fails, which allows remote attackers to access certain restricted functionality, and upload and execute arbitrary PHP code, by ignoring the redirect.

Exploit prediction (EPSS)

2.01% probability of exploitation in the next 30 days, higher than 81% of all scored CVEs.

Exploits and detections

  • EDB-3702 InoutMailingListManager 3.1 - Remote Command Execution · webapps · 2007-04-10

CVSS scores

Assigned byVersionScoreVector
NVD2.06.8AV:N/AC:M/Au:N/C:P/I:P/A:P

References

  • secunia.com /advisories/24842 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • exploit-db.com /exploits/3702 · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • vupen.com /english/advisories/2007/1345 · vdb-entry, x_refsource_VUPEN, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.