Login Request a demo
EM
Product
Email Marketer
by Interspire · last CVE Dec 9, 2022
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 7Medium 1Low 0
Severity
All severities9Critical1High7Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Email Marketer to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-14322
9.8
37%
Oct 18
The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication…
Affected: through 6.1.5
CVE-2022-40777
8.8
1%
Oct 11
Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be…
Affected: through 6.5.0
CVE-2018-19553
8.8
1%
Nov 26
Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php
Affected: through 6.1.6; 6.1.8
CVE-2018-19552
8.8
1%
Nov 26
Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid[] request to Dynamiccontenttags.php
Affected: through 6.1.6; 6.1.8
CVE-2018-19551
8.8
1%
Nov 26
Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttags.php
Affected: through 6.1.6; 6.1.8
CVE-2018-19550
8.8
6%
Nov 26
Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be…
Affected: through 6.1.6; 6.1.8
CVE-2018-19549
8.8
1%
Nov 26
Interspire Email Marketer through 6.1.6 has SQL Injection via a tagids Delete action to Dynamiccontenttags.php
Affected: through 6.1.6
CVE-2022-44790
7.5
1%
Dec 9
Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module
Affected: through 6.5.1
CVE-2018-19651
6.5
1%
Nov 28
admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery (SSRF) via a what=importurl&url= request with an http or https URL
Affected: through 6.1.6; 6.1.8
Showing 9