What is CVE-2022-44790?

CVE-2022-44790 is a high-severity vulnerability in Interspire Email Marketer, classified under SQL Injection. CVSS score: 7.5/10. Published 2022-12-09.

How severe is CVE-2022-44790?

High severity. CVSS v3 base score is 7.5 out of 10.

SQL Injection in Interspire Email Marketer

CVE-2022-44790

Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attacker could successfully perform an attack to extract potentially sensitive information from the database if the survey id exists.

Vulnerability class: SQL Injection

EPSS: 0.006 (45.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Interspire Email_marketer
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Vendor Advisory)

Frequently asked questions

What is CVE-2022-44790?: CVE-2022-44790 is a high-severity vulnerability in Interspire Email Marketer, classified under SQL Injection. CVSS score: 7.5/10. Published 2022-12-09.
How severe is CVE-2022-44790?: High severity. CVSS v3 base score is 7.5 out of 10.