CVE-2018-19550

Name of the Vulnerable Software and Affected Versions Interspire Email Marketer versions through 6.1.6

Description The issue allows for arbitrary file upload through a "create survey and submit survey" operation in surveys submit.php. This can result in a .php file being accessible under an admin/temp/surveys/ URI.

Recommendations For versions through 6.1.6, as a temporary workaround, consider restricting access to the surveys submit.php file until a patch is available. Avoid using the "create survey and submit survey" operation in surveys submit.php to minimize the risk of exploitation.