What’s Vulnerable › Vulnerabilities

CVE-2018-19651

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-11-28 · updated 2026-06-17
• Weakness: CWE-918

Description

admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery (SSRF) via a what=importurl&url= request with an http or https URL. This also allows reading local files with a file: URL.

Affected products

• Interspire Email Marketer: through 6.1.6; 6.1.8

References

• https://medium.com/%40namhb/ssrf-to-lfi-in-interspire-email-marketer-698a748462a9
• https://medium.com/%40namhb/ssrf-to-lfi-in-interspire-email-marketer-698a748462a9

Get alerted when CVE-2018-19651 or the next vulnerability affects your stack