CVE-2017-14322

🗓️ 18 Oct 2017 18:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 80 Views🌐 WEB

The function in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access

Reporter	Title	Published	Views	Family All 14
zdt	Interspire Email Marketer Authentication Bypass Vulnerability	18 Oct 201700:00	–	zdt
zdt	Interspire Email Marketer - Remote Admin Authentication Bypass Exploit	22 Apr 201800:00	–	zdt
BDU FSTEC	The vulnerability in the user registration verification function of the init.php script of the Interspire Email Marketer software allows a hacker to bypass the authentication process or obtain administrator privileges.	4 Dec 201700:00	–	bdu_fstec
CNVD	Interspire Email Marketer Security Bypass Vulnerability	18 Oct 201700:00	–	cnvd
Cvelist	CVE-2017-14322	18 Oct 201718:00	–	cvelist
Exploit DB	Interspire Email Marketer < 6.1.6 - Remote Admin Authentication Bypass	24 Apr 201800:00	–	exploitdb
exploitpack	Interspire Email Marketer 6.1.6 - Remote Admin Authentication Bypass	24 Apr 201800:00	–	exploitpack
Kitploit	CVE-2017-14322	2 Oct 202601:32	–	kitploit
NVD	CVE-2017-14322	18 Oct 201718:29	–	nvd
OpenVAS	Interspire IEM Remote Authentication Admin Bypass Vulnerability	19 Oct 201700:00	–	openvas

NVD

Node

interspire email_marketerRange≤6.1.5

Source	Link
security	www.security.infoteam.ch/en/blog/posts/narrative-of-an-incident-response-from-compromise-to-the-publication-of-the-weakness.html
exploit-db	www.exploit-db.com/exploits/44513/
seclists	www.seclists.org/fulldisclosure/2017/Oct/39

Parameter	Position	Path	Description	CWE
IEM_CookieLogin	header	email-marketer/admin/index.php	Authentication bypass via forged IEM_CookieLogin cookie to admin/index.php (CVE-2017-14322)	CWE-287

17 Jun 2026 01:05Current

9.4Critical risk

Vulners AI Score9.4

CVSS 39.8

CVSS 210

EPSS0.36505

CWE-287