7 matches found
CVE-2012-3821
A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field...
Security feature bypass
A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field...
CVE-2012-3821
A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field...
CVE-2012-3821: Incorrect Authorization
A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field...
PT-2020-7225
Name of the Vulnerable Software and Affected Versions Arial Software Campaign Enterprise version 11.0.551 Description A security issue exists in the activate.asp page, allowing a remote malicious user to modify the SerialNumber field. Recommendations For version 11.0.551, consider restricting...
PT-2014-2272
Name of the Vulnerable Software and Affected Versions Campaign Enterprise versions prior to 11.0.551 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the SerialNumber field to "activate.asp" or the UID field to "User-Edit.asp"...
CVE-2012-3820: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow remote attackers to execute arbitrary SQL commands via the 1 SerialNumber field to activate.asp or 2 UID field to User-Edit.asp...