Skip to content
Noroxi

interspire records

25 published records for vendor interspire.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

25 records
  • CVE-2017-14322
    50Plan

    The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remo

    CriticalCVSS 9.8Proof of conceptEPSS 37%

    interspire · email marketerOct 18, 2017

  • CVE-2018-19550
    37Monitor

    Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, w

    HighCVSS 8.8Proof of conceptEPSS 6%

    interspire · email marketerNov 26, 2018

  • CVE-2022-40777
    35Monitor

    Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, w

    HighCVSS 8.8No exploitEPSS 1%

    interspire · email marketerOct 11, 2022

  • CVE-2018-19551
    35Monitor

    Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttags.php.

    HighCVSS 8.8No exploitEPSS 1%

    interspire · email marketerNov 26, 2018

  • CVE-2018-19552
    35Monitor

    Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid[] request to Dynamiccontenttags.php.

    HighCVSS 8.8No exploitEPSS 1%

    interspire · email marketerNov 26, 2018

  • CVE-2018-19553
    35Monitor

    Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php

    HighCVSS 8.8No exploitEPSS 1%

    interspire · email marketerNov 26, 2018

  • CVE-2018-19549
    35Monitor

    Interspire Email Marketer through 6.1.6 has SQL Injection via a tagids Delete action to Dynamiccontenttags.php.

    HighCVSS 8.8No exploitEPSS 1%

    interspire · email marketerNov 26, 2018

  • CVE-2008-2338
    32Monitor

    Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when accessing unspecified

    HighCVSS 7.5Proof of conceptEPSS 6%

    interspire · activekbMay 19, 2008

  • CVE-2009-4957
    31Monitor

    Directory traversal vulnerability in loadpanel.php in Interspire ActiveKB allows remote attackers to read arbitrary files and possibly have

    HighCVSS 7.5Proof of conceptEPSS 2%

    interspire · activekbJul 22, 2010

  • CVE-2005-1482
    31Monitor

    ArticleLive 2005 allows remote attackers to gain privileges by modifying the (1) auth and (2) userId fields in a cookie.

    HighCVSS 7.5No exploitEPSS 2%

    interspire · articleliveMay 11, 2005

  • CVE-2009-0412
    30Monitor

    The ProcessLogin function in class.auth.php in Interspire Shopping Cart (ISC) 4.0.1 Ultimate edition allows remote attackers to bypass authe

    HighCVSS 7.5No exploitEPSS 2%

    interspire · shopping cartFeb 3, 2009

  • CVE-2005-3726
    30Monitor

    SQL injection vulnerability in Interspire ArticleLive NX 0.3 allows remote attackers to execute arbitrary SQL commands via the Query paramet

    HighCVSS 7.5No exploitEPSS 1%

    interspire · articlelive nxNov 21, 2005

  • CVE-2007-5131
    30Monitor

    SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to execute arbitrary SQL commands via the cat

    HighCVSS 7.5Proof of conceptEPSS 1%

    interspire · activekb nxSep 27, 2007

  • CVE-2007-4147
    30Monitor

    Multiple unspecified vulnerabilities in Interspire ArticleLive NX before 1.7.1.2 have unknown impact and attack vectors, possibly related to

    HighCVSS 7.5No exploitEPSS 1%

    interspire · articlelive nxAug 3, 2007

  • CVE-2022-44790
    30Monitor

    Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module.

    HighCVSS 7.5No exploitEPSS 1%

    interspire · email marketerDec 9, 2022

  • CVE-2007-1060
    29Monitor

    Multiple PHP remote file inclusion vulnerabilities in Interspire SendStudio 2004.14 and earlier, when register_globals and allow_fopenurl ar

    MediumCVSS 6.8Proof of conceptEPSS 8%

    interspire · sendstudioFeb 21, 2007

  • CVE-2018-19651
    26Monitor

    admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery (SSRF) via a what=importurl&url= reque

    MediumCVSS 6.5No exploitEPSS 1%

    interspire · email marketerNov 28, 2018

  • CVE-2007-5425
    25Monitor

    SQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers to execute arbitrary SQL commands via the

    MediumCVSS 6.4No exploitEPSS 1%

    interspire · activekbOct 12, 2007

  • CVE-2009-4192
    21Monitor

    Directory traversal vulnerability in dialog/file_manager.php in Interspire Knowledge Manager 5 allows remote attackers to read arbitrary fil

    MediumCVSS 5.0Proof of conceptEPSS 3%

    interspire · knowledge managerDec 3, 2009

  • CVE-2005-0881
    18Monitor

    Cross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers to inject arbitrary

    MediumCVSS 4.3Proof of conceptEPSS 4%

    interspire · articleliveMar 23, 2005

  • CVE-2006-0210
    18Monitor

    Cross-site scripting (XSS) vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to inject arbitrary web

    MediumCVSS 4.3Proof of conceptEPSS 2%

    interspire · trackpoint nxJan 13, 2006

  • CVE-2007-5426
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web script or HTML via t

    MediumCVSS 4.3Proof of conceptEPSS 2%

    interspire · activekb nxOct 12, 2007

  • CVE-2005-1483
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in ArticleLive 2005 allow remote attackers to inject arbitrary web script or HTML via th

    MediumCVSS 4.3No exploitEPSS 1%

    interspire · articleliveMay 11, 2005

  • CVE-2008-1076
    17Monitor

    Cross-site scripting (XSS) vulnerability in search.php in Interspire Shopping Cart 1.x allows remote attackers to inject arbitrary web scrip

    MediumCVSS 4.3No exploitEPSS 1%

    interspire · shopping cartFeb 28, 2008

  • CVE-2005-4024
    17Monitor

    Cross-site scripting (XSS) vulnerability in Interspire FastFind 2004 and 2005 allows remote attackers to inject arbitrary web script or HTML

    MediumCVSS 4.3No exploitEPSS 1%

    interspire · fastfindDec 5, 2005