PatchTheCVEinterspire vulnerabilities
Recent CVEs affecting interspire products. 2 tracked.
interspire has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-12-09. Highest priority: CVE-2022-40777 (score 52/100).
- CVE-2022-44790 HIGH 7.5 UPGRADE Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module
- CVE-2022-40777 HIGH 8.8 UPGRADE Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey a
FAQ
How do I fix interspire vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is interspire being exploited right now?
None of the tracked interspire CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which interspire CVE should I patch first?
CVE-2022-40777 currently ranks highest (52/100): Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey a.