InoutMailingListManager 3.1 and earlier allows remote attackers to access certain restricted functionality, and upload and execute arbitrary PHP code, by setting an arbitrary admin cookie.
- https://www.exploit-db.com/exploits/3702
No PoCs found on GitHub currently.