Interspire vulnerabilities
We track 2 vulnerabilities in Interspire products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 9, 2022.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Interspire vulnerabilities
- 7.5 High severity
Email Marketer: Improper Neutralization of Special Elements used in an SQL Command
Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attacker could successfully perform an attack to extract potentially sensitive information from the database if the survey id exists.
- 8.8 High severity
Email Marketer: Unrestricted Upload of File with Dangerous Type
Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be accessible under a /admin/temp/surveys/ URI. NOTE: this issue exists because of an inco