PT-2018-14997

Name of the Vulnerable Software and Affected Versions Interspire Email Marketer versions prior to 6.1.7 Description The issue concerns a SQL injection flaw. It can be exploited via a deleteblock blockid request to the "Dynamiccontenttags.php" API endpoint. Recommendations For versions prior to...

CVE-2018-19552: Improper Neutralization of Special Elements used in an SQL Command

Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid request to Dynamiccontenttags.php...