Lucene search
HistoryAug 14, 2014 - 2:55 p.m.
CVE-2012-3820
cve-2012-3820
sql injection
arial software campaign
remote code execution
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.2 High
AI Score
Confidence
High
0.017 Low
EPSS
Percentile
87.7%
Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow remote attackers to execute arbitrary SQL commands via the (1) SerialNumber field to activate.asp or (2) UID field to User-Edit.asp.
Affected configurations
Node
arialsoftwarecampaign_enterpriseRange≤11.0.538
| CPE | Name | Operator | Version |
|---|---|---|---|
| arialsoftware:campaign_enterprise | arialsoftware campaign enterprise | le | 11.0.538 |
Related
cvelist
cvelist
CVE-2012-3820
2014-08-14 14:00:00
nvd
nvd
CVE-2012-3820
2014-08-14 14:55:04
prion
prion
Sql injection
2014-08-14 14:55:00
openvas
openvas
securityvulns
securityvulns
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.2 High
AI Score
Confidence
High
0.017 Low
EPSS
Percentile
87.7%
Related for CVE-2012-3820