CVE-2018-19553

Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php...

CVE-2018-19553

Summary (CVE-2018-19553): Interspire Email Marketer up to version 6.1.6 is affected by an SQL Injection in the Dynamiccontenttags.php file, triggered by an updateblock sortorder request. The root cause is unsafely handled input in that function, allowing a remote attacker to inject and execute SQ...