Back to Database
Status published
High
CVE-2022-40777
Interspire Email Marketer through 6.5.0 allows arbitrary file upload via...
Vulnerability Description
Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be accessible under a /admin/temp/surveys/ URI. NOTE: this issue exists because of an incomplete fix for CVE-2018-19550.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-40777
Credits & Attribution
No credits recorded in the NVD database.
More from interspire
View All →CVE-2022-44790
Interspire Email Marketer through 6.5.1 allows SQL Injection via the...
Unknown
0
CVE-2018-19651
admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side...
Medium
6.5
CVE-2018-19553
Interspire Email Marketer through 6.1.6 has SQL Injection via an...
High
8.8
CVE-2018-19552
Interspire Email Marketer through 6.1.6 has SQL Injection via a...
High
8.8
CVE-2018-19551
Interspire Email Marketer through 6.1.6 has SQL Injection via a...
High
8.8
Affected Vendor
interspire
View all reports →Affected Software
email marketer
Vulnerable Versions:
0
Timeline
Official Publish:
October 11th, 2022
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.