CVE-2017-14322 | BDVDB-2026-91728 Detail

Description#

The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to bypass authentication and obtain administrative access by using the IEM_CookieLogin cookie with a specially crafted value.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/44513/
http://seclists.org/fulldisclosure/2017/Oct/39
https://security.infoteam.ch/en/blog/posts/narrative-of-an-incident-response-from-compromise-to-the-publication-of-the-weakness.html

Exploit#

https://www.exploit-db.com/exploits/44513/

History#

Version 12017-10-18Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.