Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Vendor: Interspire Component: Email Marketer Clear all filters
TI-2022-19401 CVE-2022-40777 · GHSA-w4wh-9494-g449

Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a…

Priority MEDIUM 40

Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be accessible under a /admin/temp/surveys/ URI.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01062 Published 2022-10-11 No fix listed CWE-434
TI-2018-13848 CVE-2018-19550 · GHSA-w65v-7g95-gw83

Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a…

Priority MEDIUM 47

Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be accessible under a admin/temp/surveys/ URI.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.05993 Published 2018-11-26 No fix listed CWE-434
TI-2017-10442 CVE-2017-14322 · GHSA-hxpx-g6gm-qfcj

The function in charge to check whether the user is already logged in init.php in…

Priority HIGH 68

The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.36505 Published 2017-10-18 No fix listed CWE-287