CVE-2018-19549: Improper Neutralization of Special Elements used in an SQL Command

Interspire Email Marketer through 6.1.6 has SQL Injection via a tagids Delete action to Dynamiccontenttags.php...

PT-2018-14997

Name of the Vulnerable Software and Affected Versions Interspire Email Marketer versions prior to 6.1.7 Description The issue concerns a SQL injection flaw. It can be exploited via a deleteblock blockid request to the "Dynamiccontenttags.php" API endpoint. Recommendations For versions prior to...

Interspire Email Marketer SQL Injection Vulnerability (CNVD-2018-26790)

BigCommerec Interspire Email Marketer IEM is a suite of email marketing software from BigCommerec, USA. A SQL injection vulnerability exists in the 'checkduplicatetags' function of Dynamiccontenttags.php in BigCommerec IEM 6.1.6 and earlier versions. A remote attacker can exploit this vulnerabili...

CVE-2018-19552: Improper Neutralization of Special Elements used in an SQL Command

Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid request to Dynamiccontenttags.php...

CVE-2018-19553: Improper Neutralization of Special Elements used in an SQL Command

Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php...

PT-2018-14996

Name of the Vulnerable Software and Affected Versions Interspire Email Marketer versions prior to 6.1.7 Description The issue is related to SQL Injection, which can be exploited via a checkduplicatetags tagname request to "Dynamiccontenttags.php" API endpoint. Recommendations For versions prior t...

PT-2018-14998

Name of the Vulnerable Software and Affected Versions Interspire Email Marketer versions prior to 6.1.7 Description The issue allows for SQL Injection via an updateblock sortorder request to "Dynamiccontenttags.php". Recommendations For versions prior to 6.1.7, update to version 6.1.7 or later to...

CVE-2018-19551: Improper Neutralization of Special Elements used in an SQL Command

Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttags.php...

Interspire Email Marketer SQL Injection Vulnerability (CNVD-2018-26789)

BigCommerec Interspire Email Marketer IEM is a suite of email marketing software from BigCommerec, USA. A SQL injection vulnerability exists in the 'deleteblock' function of the Dynamiccontenttags.php file in BigCommerec IEM 6.1.6 and earlier versions. A remote attacker can exploit this...