Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
InoutMailingListManager 3.1 and earlier sends a Location redirect header but does not exit after an authorization check fails, which allows remote attackers to access certain restricted functionality, and upload and execute arbitrary PHP code, by ignoring the redirect.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
InoutMailingListManager 重定向标头上传和执行任意PHP代码漏洞
Vulnerability Description
InoutMailingListManager在认证检查失败后并不退出，而是发送一个位置重定向标头，存在上传和执行任意PHP代码漏洞。远程攻击者可以忽视该重定向，访问特定的受限的功能，上传和执行任意的PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A