Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Devcoinfet

#23100of 53,624
10Total CVSS
Vulnerabilities · 1
PT-2017-3114
10
2017-09-12
Interspire · Interspire Email Marketer · CVE-2017-14322
**Name of the Vulnerable Software and Affected Versions** Interspire Email Marketer (IEM) versions prior to 6.1.6 **Description** The issue is related to a weakness in the user registration check function in the init.php script of Interspire Email Marketer (IEM), which is associated with deficiencies in the authentication procedure. This can be exploited by a remote attacker to bypass the authentication procedure and gain administrative access by using a specially crafted IEM CookieLogin cookie. **Recommendations** For versions prior to 6.1.6, update to version 6.1.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the `IEM CookieLogin` cookie to minimize the risk of exploitation.