Lucene search
+L

7 matches found

NVD
NVD
•added 2020/01/10 8:15 p.m.•25 views

CVE-2012-3821

A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field...

4.3CVSS4.7AI score0.01169EPSS
SaveExploits2References5
Prion
Prion
•added 2020/01/10 8:15 p.m.•22 views

Security feature bypass

A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field...

4CVSS7AI score0.01169EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
•added 2020/01/10 7:21 p.m.•36 views

CVE-2012-3821

A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field...

5AI score0.01169EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/10 12:00 a.m.•4 views

CVE-2012-3821: Incorrect Authorization

A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field...

4.3CVSS5.6AI score0.01169EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2020/01/10 12:00 a.m.•4 views

PT-2020-7225

Name of the Vulnerable Software and Affected Versions Arial Software Campaign Enterprise version 11.0.551 Description A security issue exists in the activate.asp page, allowing a remote malicious user to modify the SerialNumber field. Recommendations For version 11.0.551, consider restricting...

4.3CVSS0.01169EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies
•added 2014/08/14 12:00 a.m.•2 views

PT-2014-2272

Name of the Vulnerable Software and Affected Versions Campaign Enterprise versions prior to 11.0.551 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the SerialNumber field to "activate.asp" or the UID field to "User-Edit.asp"...

7.5CVSS0.02082EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/08/14 12:00 a.m.•8 views

CVE-2012-3820: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow remote attackers to execute arbitrary SQL commands via the 1 SerialNumber field to activate.asp or 2 UID field to User-Edit.asp...

7.5CVSS6.4AI score0.02082EPSS
SaveExploits2References2
Rows per page
Query Builder