CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It may be remotely exploitable.
CVE
CVE-2018-19651
Severity
MEDIUM
CVSS
6.5
EPSS
0.85%
Original NVD Description
admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery (SSRF) via a what=importurl&url= request with an http or https URL. This also allows reading local files with a file: URL.
Related CVEs
Other vulnerabilities affecting the same vendor(s)