High severity8.8NVD Advisory· Published Oct 11, 2022· Updated Jun 17, 2026
CVE-2022-40777
CVE-2022-40777
Description
Interspire Email Marketer through 6.5.0 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be accessible under a /admin/temp/surveys/ URI. NOTE: this issue exists because of an incomplete fix for CVE-2018-19550.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:interspire:email_marketer:*:*:*:*:*:*:*:*range: <=6.5.0
- (no CPE)range: <=6.5.0
Patches
Vulnerability mechanics
References
2- www.interspire.com/security-bulletin-20220918/nvdExploitThird Party Advisory
- twitter.com/huyvinhptitnvdPermissions Required
News mentions
0No linked articles in our index yet.