3 matches found
Sql injection
Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php...
6.5CVSS9.1AI score0.00984EPSS
SaveExploits0References1Affected Software1
Interspire Email Marketer SQL Injection Vulnerability (CNVD-2018-26788)
BigCommerec Interspire Email Marketer IEM is a suite of email marketing software from BigCommerec, USA. A SQL injection vulnerability exists in the 'updateblock' function of the Dynamiccontenttags.php file in BigCommerec IEM 6.1.6 and earlier versions. A remote attacker can exploit this...
8.8CVSS9.1AI score0.00984EPSS
SaveExploits0References1
CVE-2018-19553: Improper Neutralization of Special Elements used in an SQL Command
Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php...
8.8CVSS7.8AI score0.00984EPSS
SaveExploits0References2
20