CVE-2018-19553

Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:interspire:email_marketer:*:*:*:*:*:*:*:*
cpe:2.3:a:interspire:email_marketer:6.1.8:*:*:*:*:*:*:*

History

21 Nov 2024, 03:58

Type Values Removed Values Added
References () https://medium.com/%40buiquang266/some-vulnerabilities-in-interspire-email-marketer-caa7bc861d14 - () https://medium.com/%40buiquang266/some-vulnerabilities-in-interspire-email-marketer-caa7bc861d14 -

07 Nov 2023, 02:55

Type Values Removed Values Added
References
  • {'url': 'https://medium.com/@buiquang266/some-vulnerabilities-in-interspire-email-marketer-caa7bc861d14', 'name': 'https://medium.com/@buiquang266/some-vulnerabilities-in-interspire-email-marketer-caa7bc861d14', 'tags': ['Exploit', 'Third Party Advisory'], 'refsource': 'MISC'}
  • () https://medium.com/%40buiquang266/some-vulnerabilities-in-interspire-email-marketer-caa7bc861d14 -

Information

Published : 2018-11-26 07:29

Updated : 2024-11-21 03:58


NVD link : CVE-2018-19553

Mitre link : CVE-2018-19553

CVE.ORG link : CVE-2018-19553


JSON object : View

Products Affected

interspire

  • email_marketer
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')