CVE-2018-19550

Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be accessible under a admin/temp/surveys/ URI.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:interspire:email_marketer:*:*:*:*:*:*:*:*
cpe:2.3:a:interspire:email_marketer:6.1.8:*:*:*:*:*:*:*

History

21 Nov 2024, 03:58

Type Values Removed Values Added
References () http://packetstormsecurity.com/files/153018/Interspire-Email-Marketer-6.20-Remote-Code-Execution.html - () http://packetstormsecurity.com/files/153018/Interspire-Email-Marketer-6.20-Remote-Code-Execution.html -
References () https://medium.com/%40buiquang266/some-vulnerabilities-in-interspire-email-marketer-caa7bc861d14 - () https://medium.com/%40buiquang266/some-vulnerabilities-in-interspire-email-marketer-caa7bc861d14 -

07 Nov 2023, 02:55

Type Values Removed Values Added
References
  • {'url': 'https://medium.com/@buiquang266/some-vulnerabilities-in-interspire-email-marketer-caa7bc861d14', 'name': 'https://medium.com/@buiquang266/some-vulnerabilities-in-interspire-email-marketer-caa7bc861d14', 'tags': ['Third Party Advisory'], 'refsource': 'MISC'}
  • () https://medium.com/%40buiquang266/some-vulnerabilities-in-interspire-email-marketer-caa7bc861d14 -

Information

Published : 2018-11-26 07:29

Updated : 2024-11-21 03:58


NVD link : CVE-2018-19550

Mitre link : CVE-2018-19550

CVE.ORG link : CVE-2018-19550


JSON object : View

Products Affected

interspire

  • email_marketer
CWE
CWE-434

Unrestricted Upload of File with Dangerous Type