CVE-2018-19552 Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid[] request to Dynamiccontenttags.php.
HighCVSS 8.8
EPSS 0.98%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid[] request to Dynamiccontenttags.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| interspire email marketer | <= 6.1.6 | No fix listed |
| interspire email marketer | = 6.1.8 | No fix listed |