66 matches found
iem-srl.it Cross Site Scripting vulnerability OBB-1243352
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Interspire Email Marketer SQL Injection Vulnerability (CNVD-2018-26789)
BigCommerec Interspire Email Marketer IEM is a suite of email marketing software from BigCommerec, USA. A SQL injection vulnerability exists in the 'deleteblock' function of the Dynamiccontenttags.php file in BigCommerec IEM 6.1.6 and earlier versions. A remote attacker can exploit this...
Interspire IEM Remote Authentication Admin Bypass Vulnerability
Interspire Email Marketer IEM is prone to a remote authentication admin bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...
CVE-2017-14322
The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer IEM prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEMCookieLogin cookie with a specially crafted value...
CVE-2017-14322
Interspire Email Marketer (IEM) prior to version 6.1.6 contains a vulnerability in the init.php login-status check that allows remote authentication bypass. By supplying a crafted value for the IEM_CookieLogin cookie, an attacker can obtain administrative access without valid credentials. Documen...
Unfixed XSS vulnerability at iem-fi-candidate.adeccoweb.net
Security researcher DerickTham, has submitted on 21/12/2007 a cross-site-scripting XSS vulnerability affecting iem-fi-candidate.adeccoweb.net, which at the time of submission ranked 71272 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...