Design/Logic Flaw

Campaign/CampaignListener in the listener server in Unica Affinium Campaign 7.2.1.0.55 allows remote attackers to cause a denial of service server crash via a crafted length field that triggers 1 connection exhaustion or 2 memory allocation failure...

CVE-2008-7092: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Unica Affinium Campaign 7.2.1.0.55 allow remote attackers to inject arbitrary web script or HTML via a Javascript event in the 1 url, 2 PageName, and 3 title parameters in a CustomBookMarkLink action to Campaign/Campaign; 4 a Javascript event i...

aflistenerdirectorytraversal-08_006.txt

Portcullis Security Advisory - 08-006 Vulnerable System: Affinium Campaign Vulnerability Title: The Listener is vulnerable to directory traversal. Vulnerability Discovery And Development: Portcullis Security Testing Services. Credit For Discovery: Tim Brown - Portcullis Computer-Security Ltd...

affolderdirectorytraversal-08_002.txt

Portcullis Security Advisory - 08-002 Vulnerable System: Affinium Campaign Vulnerability Title: The web application's create a new folder functionality is vulnerable to a directory traversal. Vulnerability Discovery And Development: Portcullis Security Testing Services. Credit For Discovery: Neil...