NetSight
high7.5

CVE-2022-44790

Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module.

Impact

Interspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An unauthenticated attacker could successfully perform an attack to extract potentially sensitive information from the database if the survey id exists.

Affected products

VendorProductAffected versions
InterspireEmail Marketer
through 6.5.1

Weakness classification

References