Interspire IEM - Admin Auth Bypass Detection (CVE-2017-14322)

Detects CVE-2017-14322 by sending crafted IEMCookieLogin and verifying access to admin settings/phpinfo. !/usr/bin/env python3 -- coding: utf-8 -- """Interspire Email Marketer admin auth bypass CVE-2017-14322.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Exploit for Improper Authentication in Interspire Email_Marketer

CVE-2017-14322 Interspire Email Marketer emailmarketer Explo...

Authentication flaw

The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer IEM prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEMCookieLogin cookie with a specially crafted value...

CVE-2017-14322: Improper Authentication

The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer IEM prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEMCookieLogin cookie with a specially crafted value...