CVE-2007-2002: Inoutmailinglistmanager

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

InoutMailingListManager 3.1 and earlier allows remote attackers to access certain restricted functionality, and upload and execute arbitrary PHP code, by setting an arbitrary admin cookie.

Affected products

Published 2007-04-12. Last modified 2026-06-16.