Beveiligingsadvies

CVE-2007-2003

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2007-04-12 19:00:00

Laatst bijgewerkt 2024-08-07 13:13:42

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

InoutMailingListManager 3.1 and earlier sends a Location redirect header but does not exit after an authorization check fails, which allows remote attackers to access certain restricted functionality, and upload and execute arbitrary PHP code, by ignoring the redirect.

← Alle CVE's bekijken Bekijk op cve.org ↗