Inout Mailing List Manager Multiple Vulnerabilities

Bugtraq ID:	23407
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Apr 11 2007 12:00AM
Updated:	Apr 11 2007 10:11PM
Credit:	BlackHawk is credited with the discovery of these vulnerabilities.
Vulnerable:	Inout Scripts Inout Mailing List Manager 3.1
Not Vulnerable:

Inout Mailing List Manager Multiple Vulnerabilities

Inout Mailing List Manager is prone to unauthorized-access and SQL-injection vulnerabilities.

A remote attacker can bypass security restrictions, access administrative areas, and conduct SQL-injection attacks. A successful exploit may allow the attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database implementation.

Inout Mailing List Manager Multiple Vulnerabilities

Attackers can use a browser to exploit these issues.

The following proof-of-concept examples are also available.

• /data/vulnerabilities/exploits/inout_multiple_vulns.php

Inout Mailing List Manager Multiple Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Inout Mailing List Manager Multiple Vulnerabilities

References:

• Inout Scripts Homepage (Inout Scripts)