CVE Feed

    Dashboard / CVE / CVE-2022-44790

    CVE-2022-44790

    Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attacker could successfully perform an attack to extract potentially sensitive information from the database if the survey id exists.

    Published:Dec 9, 2022
    Last Modified:Apr 23, 2025
    EPS:Dec 9, 2022
    EPSS Score:0.00421
    CVSS Score:7.5

    Affected Products

    Vendor
    Interspire
    Product
    Email Marketer

    Exploits

    No exploit reference

    Related CVEs

    CVE-2022-40777 (CVSS 8.8) — Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey a…
    CVE-2018-19651 (CVSS 6.5) — admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery (SSRF) v…
    CVE-2018-19549 (CVSS 8.8) — Interspire Email Marketer through 6.1.6 has SQL Injection via a tagids Delete action to Dynamiccontenttags.php…
    CVE-2018-19551 (CVSS 8.8) — Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamicc…
    CVE-2018-19552 (CVSS 8.8) — Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid[] request to Dynamicconten…
    CVE-2018-19553 (CVSS 8.8) — Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamicconte…
    CVE-2018-19550 (CVSS 8.8) — Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php "create survey a…
    CVE-2017-14322 (CVSS 9.8) — The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (I…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High