CVE-2007-2003: Inoutmailinglistmanager

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

InoutMailingListManager 3.1 and earlier sends a Location redirect header but does not exit after an authorization check fails, which allows remote attackers to access certain restricted functionality, and upload and execute arbitrary PHP code, by ignoring the redirect.

Affected products

• Inoutmailinglistmanager Inoutmailinglistmanager: up to and including 3.1

Published 2007-04-12. Last modified 2026-06-16.