211 matches found
BigCommerec Interspire Email Marketer 代码问题漏洞
Bigcommerec BigCommerec Interspire Email Marketer IEM is a suite of email marketing software from the US-based company Bigcommerec. A security vulnerability exists in Interspire Email Marketer version 6.5.0 that originates from allowing arbitrary files to be uploaded via the surveyssubmit.php...
CVE-2022-40777
Interspire Email Marketer 6.5.0 and earlier allow arbitrary file uploads via surveys_submit.php (create survey and submit survey), enabling PHP files to be placed under admin/temp/surveys/. This CVE (CVE-2022-40777) links to an incomplete fix of CVE-2018-19550 and is supported by older advisories...
PT-2022-25535 · Interspire · Interspire Email Marketer
Name of the Vulnerable Software and Affected Versions: Interspire Email Marketer versions prior to 6.5.1 Description: The issue allows for arbitrary file upload through a "create survey and submit survey" operation in surveys submit.php. This can lead to a .php file being accessible under the...
CVE-2018-21235
An issue was discovered in Foxit E-mail advertising system before September 2018. It allows authentication bypass and information disclosure, related to Interspire Email Marketer...
CVE-2018-21235
An issue was discovered in Foxit E-mail advertising system before September 2018. It allows authentication bypass and information disclosure, related to Interspire Email Marketer...
Information disclosure
An issue was discovered in Foxit E-mail advertising system before September 2018. It allows authentication bypass and information disclosure, related to Interspire Email Marketer...
CVE-2018-21235
CVE-2018-21235 affects Foxit E-mail advertising system versions prior to September 2018, with the issue described as an authentication bypass and information disclosure related to Interspire Email Marketer. Data from connected sources confirms a network-accessible vulnerability with partial confi...
Interspire Email Marketer Remote Code Execution (CVE-2018-19550)
A remote code execution vulnerability exists in Interspire Email Marketer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Interspire Email Marketer 6.20 Remote Code Execution
Exploit Title: Interspire Email Marketer 6.20 - Remote Code Execution Date: May 2019 Exploit Author: Numan Türle Vendor Homepage: https://www.interspire.com Software Link: https://www.interspire.com/emailmarketer Version: 6.20 $widget foreach $widget as $widgetKey = $fields foreach $fields as...
Interspire Email Marketer 6.20 - surveys_submit.php Remote Code Execution
Interspire Email Marketer 6.20 - surveyssubmit.php Remote Code Execution Exploit Title: Interspire Email Marketer 6.20 - Remote Code Execution Date: May 2019 Exploit Author: Numan Türle Vendor Homepage: https://www.interspire.com Software Link: https://www.interspire.com/emailmarketer Version: 6....
Interspire Email Marketer 6.20 - Remote Code Execution Exploit
Exploit for php platform in category web applications Exploit Title: Interspire Email Marketer 6.20 - Remote Code Execution Date: May 2019 Exploit Author: Numan Türle Vendor Homepage: https://www.interspire.com Software Link: https://www.interspire.com/emailmarketer Version: 6.20 $widget foreach...
Interspire Email Marketer 6.20 - 'surveys_submit.php' Remote Code Execution
Exploit Title: Interspire Email Marketer 6.20 - Remote Code Execution Date: May 2019 Exploit Author: Numan Türle Vendor Homepage: https://www.interspire.com Software Link: https://www.interspire.com/emailmarketer Version: 6.20 $widget foreach $widget as $widgetKey = $fields foreach $fields as...
CVE-2018-19651
admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery SSRF via a what=importurl&url= request with an http or https URL. This also allows reading local files with a file: URL...
Server side request forgery (ssrf)
admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery SSRF via a what=importurl&url= request with an http or https URL. This also allows reading local files with a file: URL...
CVE-2018-19651
admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery SSRF via a what=importurl&url= request with an http or https URL. This also allows reading local files with a file: URL...
CVE-2018-19651
CVE-2018-19651 affects Interspire Email Marketer up to version 6.1.6. The issue is a Server-Side Request Forgery (SSRF) in admin/functions/remote.php triggered by a what=importurl&url= parameter, enabling requests to arbitrary http/https URLs and, per reports, local-file access via file: URLs. Re...
CVE-2018-19651
admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery SSRF via a what=importurl&url= request with an http or https URL. This also allows reading local files with a file: URL...
Sql injection
Interspire Email Marketer through 6.1.6 has SQL Injection via a tagids Delete action to Dynamiccontenttags.php...