EUVD-2018-11238

Malware in sbrugna...

EUVD-2018-11240

Malware in sbrugna...

EUVD-2018-11241

Malware in sbrugna...

Sql injection

Interspire Email Marketer through 6.1.6 has SQL Injection via a tagids Delete action to Dynamiccontenttags.php...

CVE-2018-19553

Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php...

Sql injection

Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php...

Sql injection

Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid request to Dynamiccontenttags.php...

CVE-2018-19552

Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid request to Dynamiccontenttags.php...

CVE-2018-19553

Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php...

CVE-2018-19551

Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttags.php...

Sql injection

Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttags.php...

CVE-2018-19549

Interspire Email Marketer through 6.1.6 has SQL Injection via a tagids Delete action to Dynamiccontenttags.php...

CVE-2018-19551

CVE-2018-19551 affects Interspire Email Marketer up to version 6.1.6, where a SQL injection exists in the checkduplicatetags tagname request handled by Dynamiccontenttags.php. The root cause is unsafe handling of input leading to arbitrary SQL execution by a remote attacker. The impact described ...

CVE-2018-19553

Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php...

CVE-2018-19549

Interspire Email Marketer through 6.1.6 has SQL Injection via a tagids Delete action to Dynamiccontenttags.php...

CVE-2018-19551

Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttags.php...

CVE-2018-19549

Interspire Email Marketer up to version 6.1.6 is affected by a SQL Injection via the tagids Delete action in Dynamiccontenttags.php. Root cause is improper handling of tagids in the delete-tags flow, enabling arbitrary SQL execution with partial/high impact to confidentiality, integrity, and avai...

CVE-2018-19552

Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid request to Dynamiccontenttags.php...

CVE-2018-19553

Summary (CVE-2018-19553): Interspire Email Marketer up to version 6.1.6 is affected by an SQL Injection in the Dynamiccontenttags.php file, triggered by an updateblock sortorder request. The root cause is unsafely handled input in that function, allowing a remote attacker to inject and execute SQ...

PT-2018-14994

Name of the Vulnerable Software and Affected Versions Interspire Email Marketer versions prior to 6.1.7 Description The issue is related to SQL Injection, which can be exploited via a tagids Delete action to the "Dynamiccontenttags.php" endpoint. Recommendations For Interspire Email Marketer...