Interspire Email Marketer Administrative Authentication Bypass

''' Exploit Title: Interspire Email Marketer - Remote Admin Authentication Bypass Google Dork: intitle:"Control Panel" + emailmarketer Date: 4-22-18 Exploit Author: devcoinfet Vendor Homepage: www.interspire.com/emailmarketer Software Link: Can't legally provide link but can be found on net...

CVE-2017-14322

Interspire Email Marketer (IEM) prior to version 6.1.6 contains a vulnerability in the init.php login-status check that allows remote authentication bypass. By supplying a crafted value for the IEM_CookieLogin cookie, an attacker can obtain administrative access without valid credentials. Documen...