Interspire Email Marketer
9 CVEs affecting Interspire Email Marketer. Latest disclosed: 2022-12-09. Critical: 1, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-14322 | Critical | 9.8 | 2017-10-18 | The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to byp… |
CVE-2022-40777 | High | 8.8 | 2022-10-11 | Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .p… |
CVE-2018-19553 | High | 8.8 | 2018-11-26 | Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php |
CVE-2018-19552 | High | 8.8 | 2018-11-26 | Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid[] request to Dynamiccontenttags.php. |
CVE-2018-19551 | High | 8.8 | 2018-11-26 | Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttags.php. |
CVE-2018-19550 | High | 8.8 | 2018-11-26 | Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .p… |
CVE-2018-19549 | High | 8.8 | 2018-11-26 | Interspire Email Marketer through 6.1.6 has SQL Injection via a tagids Delete action to Dynamiccontenttags.php. |
CVE-2022-44790 | High | 7.5 | 2022-12-09 | Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attacker could successfully perform an attack to extrac… |
CVE-2018-19651 | Medium | 6.5 | 2018-11-28 | admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery (SSRF) via a what=importurl&url= request with an http or… |