CVE-2013-3264: Undefined Security Weakness

The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to 1 list/edit.php and 2 campaign/editCampaign.php, which allows remote attackers to modify list or campaign data...

CVE-2008-6156

This CVE-2008-6156 describes an SQL injection in AdMan 1.1.20070907, specifically in editCampaign.php where the campaignId parameter can be exploited by remote authenticated users to execute arbitrary SQL commands. The available references (NVD, CVE records, and external advisories) confirm the v...

CVE-2008-6156: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in editCampaign.php in AdMan 1.1.20070907 allows remote authenticated users to execute arbitrary SQL commands via the campaignId parameter...

CVE-2006-1375: Undefined Security Weakness

AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via 1 a blank campaignId parameter to editCampaign.php and 2 a blank schemeId parameter to viewPricingScheme.php...