Security phpList 3.0.10 Insecure Direct Object Reference April 1, 2015 007admin phpList version 3.0.10 suffers from an insecure direct object reference vulnerability.