Nguyen Huy Vinh

**Name of the Vulnerable Software and Affected Versions** Interspire Email Marketer versions prior to 6.5.1 **Description** The issue allows for arbitrary file upload through a "create survey and submit survey" operation in surveys submit.php. This can lead to a .php file being accessible under the /admin/temp/surveys/ URI, potentially causing security issues. The problem exists due to an incomplete fix for a previous issue. **Recommendations** For versions prior to 6.5.1, update to version 6.5.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the surveys submit.php file to minimize the risk of exploitation. Avoid using the "create survey and submit survey" operation in surveys submit.php until the issue is resolved.