CVE-2012-3822

Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials...

CVE-2012-3822

CVE-2012-3822 affects Arial Campaign Enterprise before v11.0.551. The vulnerability is an unauthorized access issue on the User-Edit.asp page that enables remote attackers to enumerate users’ credentials, i.e., information disclosure of credentials. The root cause is access to a user-edit interfa...

CVE-2012-3822: Incorrect Authorization

Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials...

PT-2020-7226

Name of the Vulnerable Software and Affected Versions Arial Campaign Enterprise versions prior to 11.0.551 Description The issue allows remote attackers to enumerate users' credentials due to unauthorized access to the User-Edit.asp page. Recommendations For versions prior to 11.0.551, update to...

CVE-2012-3820: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow remote attackers to execute arbitrary SQL commands via the 1 SerialNumber field to activate.asp or 2 UID field to User-Edit.asp...

PT-2014-2272

Name of the Vulnerable Software and Affected Versions Campaign Enterprise versions prior to 11.0.551 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the SerialNumber field to "activate.asp" or the UID field to "User-Edit.asp"...