PatchTheCVEemail marketer vulnerabilities and fixes
Recent CVEs affecting email marketer, with upgrade or downgrade steps. 2 tracked.
Also searched as: emailmarketer.
email marketer has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-12-09. Highest priority: CVE-2022-40777 (score 52/100).
- CVE-2022-44790 HIGH 7.5 UPGRADE Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module
- CVE-2022-40777 HIGH 8.8 UPGRADE Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey a
FAQ
How do I fix email marketer vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is email marketer being exploited right now?
None of the tracked email marketer CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which email marketer CVE should I patch first?
CVE-2022-40777 currently ranks highest (52/100): Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey a.