CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-19550

Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be accessible under a admin/temp/surveys/ URI.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.02

EPSS Ranking 82.8%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2018-19550

Interspire » Email Marketer » Version: 5.0.10

cpe:2.3:a:interspire:email_marketer:5.0.10
Interspire » Email Marketer » Version: 5.0.11

cpe:2.3:a:interspire:email_marketer:5.0.11
Interspire » Email Marketer » Version: 5.0.13

cpe:2.3:a:interspire:email_marketer:5.0.13
Interspire » Email Marketer » Version: 5.0.14

cpe:2.3:a:interspire:email_marketer:5.0.14
Interspire » Email Marketer » Version: 5.0.9

cpe:2.3:a:interspire:email_marketer:5.0.9
Interspire » Email Marketer » Version: 5.5.10

cpe:2.3:a:interspire:email_marketer:5.5.10
Interspire » Email Marketer » Version: 5.5.11

cpe:2.3:a:interspire:email_marketer:5.5.11
Interspire » Email Marketer » Version: 5.5.2

cpe:2.3:a:interspire:email_marketer:5.5.2
Interspire » Email Marketer » Version: 5.5.3

cpe:2.3:a:interspire:email_marketer:5.5.3
Interspire » Email Marketer » Version: 5.5.4

cpe:2.3:a:interspire:email_marketer:5.5.4
Interspire » Email Marketer » Version: 5.5.5

cpe:2.3:a:interspire:email_marketer:5.5.5
Interspire » Email Marketer » Version: 5.5.6

cpe:2.3:a:interspire:email_marketer:5.5.6
Interspire » Email Marketer » Version: 5.5.7

cpe:2.3:a:interspire:email_marketer:5.5.7
Interspire » Email Marketer » Version: 5.5.8

cpe:2.3:a:interspire:email_marketer:5.5.8
Interspire » Email Marketer » Version: 5.5.9

cpe:2.3:a:interspire:email_marketer:5.5.9
Interspire » Email Marketer » Version: 5.6.0

cpe:2.3:a:interspire:email_marketer:5.6.0
Interspire » Email Marketer » Version: 5.6.1

cpe:2.3:a:interspire:email_marketer:5.6.1
Interspire » Email Marketer » Version: 5.6.2

cpe:2.3:a:interspire:email_marketer:5.6.2
Interspire » Email Marketer » Version: 5.6.3

cpe:2.3:a:interspire:email_marketer:5.6.3
Interspire » Email Marketer » Version: 5.6.4

cpe:2.3:a:interspire:email_marketer:5.6.4
Interspire » Email Marketer » Version: 5.6.5

cpe:2.3:a:interspire:email_marketer:5.6.5
Interspire » Email Marketer » Version: 5.6.6

cpe:2.3:a:interspire:email_marketer:5.6.6
Interspire » Email Marketer » Version: 5.6.7

cpe:2.3:a:interspire:email_marketer:5.6.7
Interspire » Email Marketer » Version: 5.7.0

cpe:2.3:a:interspire:email_marketer:5.7.0
Interspire » Email Marketer » Version: 5.7.1

cpe:2.3:a:interspire:email_marketer:5.7.1
Interspire » Email Marketer » Version: 6.0.0

cpe:2.3:a:interspire:email_marketer:6.0.0
Interspire » Email Marketer » Version: 6.0.1

cpe:2.3:a:interspire:email_marketer:6.0.1
Interspire » Email Marketer » Version: 6.1.0

cpe:2.3:a:interspire:email_marketer:6.1.0
Interspire » Email Marketer » Version: 6.1.1

cpe:2.3:a:interspire:email_marketer:6.1.1
Interspire » Email Marketer » Version: 6.1.2

cpe:2.3:a:interspire:email_marketer:6.1.2
Interspire » Email Marketer » Version: 6.1.3

cpe:2.3:a:interspire:email_marketer:6.1.3
Interspire » Email Marketer » Version: 6.1.4

cpe:2.3:a:interspire:email_marketer:6.1.4
Interspire » Email Marketer » Version: 6.1.5

cpe:2.3:a:interspire:email_marketer:6.1.5
Interspire » Email Marketer » Version: 6.1.6

cpe:2.3:a:interspire:email_marketer:6.1.6
Interspire » Email Marketer » Version: 6.1.8

cpe:2.3:a:interspire:email_marketer:6.1.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-19550

Products

Pricing

Contact Us