CVE-2007-2003

CVE-2007-2003 affects InoutMailingListManager 3.1 and earlier. The issue is that after an authorization check fails the application returns a Location header but does not exit, allowing remote attackers to access restricted functionality and to upload/execute arbitrary PHP code by ignoring the re...