25 matches found
CVE-2018-19553: Improper Neutralization of Special Elements used in an SQL Command
Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php...
CVE-2018-19551: Improper Neutralization of Special Elements used in an SQL Command
Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttags.php...
Interspire Email Marketer SQL Injection Vulnerability (CNVD-2018-26790)
BigCommerec Interspire Email Marketer IEM is a suite of email marketing software from BigCommerec, USA. A SQL injection vulnerability exists in the 'checkduplicatetags' function of Dynamiccontenttags.php in BigCommerec IEM 6.1.6 and earlier versions. A remote attacker can exploit this vulnerabili...
CVE-2018-19552: Improper Neutralization of Special Elements used in an SQL Command
Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid request to Dynamiccontenttags.php...
Interspire Email Marketer SQL Injection Vulnerability (CNVD-2018-26789)
BigCommerec Interspire Email Marketer IEM is a suite of email marketing software from BigCommerec, USA. A SQL injection vulnerability exists in the 'deleteblock' function of the Dynamiccontenttags.php file in BigCommerec IEM 6.1.6 and earlier versions. A remote attacker can exploit this...