CVE-2022-40777

概要

参考情報

• twitter.com/huyvinhptit · Permissions Required
• interspire.com/security-bulletin-20220918 · Exploit

email marketer のその他の脆弱性

• CVE-2022-44790高 7.5Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attacker could successfully perform …
• CVE-2018-19651中 6.5admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery (SSRF) via a what=importurl&url= reque…
• CVE-2018-19553高 8.8Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php
• CVE-2018-19552高 8.8Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid[] request to Dynamiccontenttags.php.
• CVE-2018-19551高 8.8Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttags.php.