CVE Feed

    Dashboard / CVE / CVE-2017-14322

    CVE-2017-14322

    The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEM_CookieLogin cookie with a specially crafted value.

    Published:Oct 18, 2017
    Last Modified:Apr 20, 2025
    EPS:Oct 18, 2017
    EPSS Score:0.26136
    CVSS Score:9.8

    Affected Products

    Vendor
    Interspire
    Product
    Email Marketer

    Exploits

    https://www.exploit-db.com/exploits/44513/https://www.exploit-db.com/exploits/44513/https://www.exploit-db.com/exploits/44513https://github.com/joesmithjaffa/CVE-2017-14322

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2022-44790 (CVSS 7.5) — Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attack…
    CVE-2022-40777 (CVSS 8.8) — Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey a…
    CVE-2018-19651 (CVSS 6.5) — admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery (SSRF) v…
    CVE-2018-19549 (CVSS 8.8) — Interspire Email Marketer through 6.1.6 has SQL Injection via a tagids Delete action to Dynamiccontenttags.php…
    CVE-2018-19551 (CVSS 8.8) — Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamicc…
    CVE-2018-19552 (CVSS 8.8) — Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid[] request to Dynamicconten…
    CVE-2018-19553 (CVSS 8.8) — Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamicconte…
    CVE-2018-19550 (CVSS 8.8) — Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php "create survey a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High