Email Marketer vulnerabilities

2 known vulnerabilities in Email Marketer from Interspire. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Email Marketer: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-44790Dec 9, 2022Interspire

  Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attacker could successfully perform an attack to extract potentially sensitive information from the database if the survey id exists.

• 8.8 High severity

  Email Marketer: Unrestricted Upload of File with Dangerous Type

  CVE-2022-40777Oct 11, 2022InterspireEPSS 1.06%

  Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be accessible under a /admin/temp/surveys/ URI. NOTE: this issue exists because of an inco