CVE-2018-19550

Interspire Email Marketer up to v6.1.6 is affected: the surveys_submit.php operation for creating/submitting surveys allows arbitrary file uploads, resulting in a PHP file being accessible under admin/temp/surveys/. Public exploit details (e.g., PacketStorm) demonstrate remote code execution via ...

CVE-2018-19552

Interspire Email Marketer up to version 6.1.6 is affected by a SQL Injection in the Dynamiccontenttags.php file through the deleteblock blockid[] parameter. The root cause is improper handling of user-supplied input enabling unauthorized SQL command execution, with impact on confidentiality, inte...

Interspire Email Marketer SQL Injection Vulnerability (CNVD-2018-26789)

BigCommerec Interspire Email Marketer IEM is a suite of email marketing software from BigCommerec, USA. A SQL injection vulnerability exists in the 'deleteblock' function of the Dynamiccontenttags.php file in BigCommerec IEM 6.1.6 and earlier versions. A remote attacker can exploit this...

Interspire Email Marketer Arbitrary File Upload Vulnerability

BigCommerec Interspire Email Marketer IEM is a suite of email marketing software from BigCommerec, USA. A security vulnerability exists in BigCommerec IEM 6.1.6 and earlier versions. The vulnerability can be exploited by an attacker to upload arbitrary files by performing a 'create and submit...

Interspire Email Marketer SQL Injection Vulnerability (CNVD-2018-26788)

BigCommerec Interspire Email Marketer IEM is a suite of email marketing software from BigCommerec, USA. A SQL injection vulnerability exists in the 'updateblock' function of the Dynamiccontenttags.php file in BigCommerec IEM 6.1.6 and earlier versions. A remote attacker can exploit this...

Interspire Email Marketer SQL Injection Vulnerability (CNVD-2018-26787)

BigCommerec Interspire Email Marketer IEM is a suite of email marketing software from BigCommerec, USA. A SQL injection vulnerability exists in the 'delete tags' function of the Dynamiccontenttags.php file in BigCommerec IEM 6.1.6 and earlier versions. A remote attacker can exploit this...

Interspire Email Marketer SQL Injection Vulnerability (CNVD-2018-26790)

BigCommerec Interspire Email Marketer IEM is a suite of email marketing software from BigCommerec, USA. A SQL injection vulnerability exists in the 'checkduplicatetags' function of Dynamiccontenttags.php in BigCommerec IEM 6.1.6 and earlier versions. A remote attacker can exploit this vulnerabili...

Interspire Email Marketer Administrative Authentication Bypass

''' Exploit Title: Interspire Email Marketer - Remote Admin Authentication Bypass Google Dork: intitle:"Control Panel" + emailmarketer Date: 4-22-18 Exploit Author: devcoinfet Vendor Homepage: www.interspire.com/emailmarketer Software Link: Can't legally provide link but can be found on net...

Interspire Email Marketer 6.1.6 - Remote Admin Authentication Bypass

Interspire Email Marketer 6.1.6 - Remote Admin Authentication Bypass ''' Exploit Title: Interspire Email Marketer - Remote Admin Authentication Bypass Google Dork: intitle:"Control Panel" + emailmarketer Date: 4-22-18 Exploit Author: devcoinfet Vendor Homepage: www.interspire.com/emailmarketer...

Interspire Email Marketer < 6.1.6 - Remote Admin Authentication Bypass

''' Exploit Title: Interspire Email Marketer - Remote Admin Authentication Bypass Google Dork: intitle:"Control Panel" + emailmarketer Date: 4-22-18 Exploit Author: devcoinfet Vendor Homepage: www.interspire.com/emailmarketer Software Link: Can't legally provide link but can be found on net...

Interspire Email Marketer - Remote Admin Authentication Bypass Exploit

The function in charge of checking whether the user is already logged in init.php in Interspire Email Marketer IEM prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEMCookieLogin cookie with a specially crafted value. On top of that, if...

emailmarketer.interspire-demo.com XSS vulnerability

Open Bug Bounty ID: OBB-388592 Description| Value ---|--- Affected Website:| emailmarketer.interspire-demo.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

CVE-2017-14322

The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer IEM prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEMCookieLogin cookie with a specially crafted value...

Authentication flaw

The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer IEM prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEMCookieLogin cookie with a specially crafted value...

CVE-2017-14322

Interspire Email Marketer (IEM) prior to version 6.1.6 contains a vulnerability in the init.php login-status check that allows remote authentication bypass. By supplying a crafted value for the IEM_CookieLogin cookie, an attacker can obtain administrative access without valid credentials. Documen...

CVE-2017-14322

The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer IEM prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEMCookieLogin cookie with a specially crafted value...

Interspire Email Marketer Security Bypass Vulnerability

BigCommerec Interspire Email Marketer IEM is a suite of email marketing software. A security vulnerability exists in the function used to detect a user's login status in the init.php file in BigCommerec IEM versions prior to 6.1.6. A remote attacker can exploit this vulnerability to bypass...

Interspire Email Marketer Authentication Bypass Vulnerability

Interspire Email Marketer versions prior to 6.1.6 suffered from an administrative authentication bypass vulnerability. Title: ====== Interspire Email Marketer - Remote Admin Authentication Bypass Author: ======= Hakan KA1/4sne, Infoteam Security CH CVE-ID: ======= CVE-2017-14322 Risk Information:...

Interspire IEM Detection

This scripts tries to detect the Interspire Email Marketer and its version on the host system. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Interspire Email Marketer 6.1.5 Cross Site Scripting

Affected software: interspire email marketer Type of vulnerability:flash xss URL:http://emailmarketer.interspire-demo.com/ Discovered by: provensec Website: provensec.com version: Interspire Email Marketer 6.1.5 Proof of concept...