CVE-2018-19549

Interspire Email Marketer up to version 6.1.6 is affected by a SQL Injection via the tagids Delete action in Dynamiccontenttags.php. Root cause is improper handling of tagids in the delete-tags flow, enabling arbitrary SQL execution with partial/high impact to confidentiality, integrity, and avai...