EDB-3702
functionalInoutMailingListManager 3.1 - Remote Command Execution
view exploit source exploit_dbverifiedtype webappsauthor BlackHawkpublished 2007-04-10catalog exploit_db
01
exploited CVEs (5)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2007-2002US | medium6.8 | Exploit | ||
InoutMailingListManager 3.1 and earlier allows remote attackers to access certain restricted functionality, and upload and execute arbitrary PHP code, by setting an arbitrary admin… | ||||
| CVE-2007-2003US | medium6.8 | Exploit | ||
InoutMailingListManager 3.1 and earlier sends a Location redirect header but does not exit after an authorization check fails, which allows remote attackers to access certain restr… | ||||
| CVE-2007-2004US | high7.5 | Exploit | ||
Multiple SQL injection vulnerabilities in InoutMailingListManager 3.1 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to changename.php an… | ||||
| CVE-2006-0658US | medium5.0 | Exploit | ||
Incomplete blacklist vulnerability in connector.php in FCKeditor 2.0 and 2.2, as used in products such as RunCMS, allows remote attackers to upload and execute arbitrary script fil… | ||||
| CVE-2005-0613US | medium5.0 | Exploit | ||
Unknown vulnerability in FCKeditor 2.0 RC2, when used with PHP-Nuke, allows remote attackers to upload arbitrary files. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan