arialsoftware vulnerabilities

Products

• campaign enterprise 5

Latest arialsoftware CVEs

Newest publication first

1. CVE-2012-3821 A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field.

   Published 2020-01-10

   Medium·CVSS 4.3

   A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field.

2. CVE-2012-3824 In Arial Campaign Enterprise before 11.0.551, multiple pages are accessible without authentication or authorization.

   Published 2020-01-10

   High·CVSS 7.5

   In Arial Campaign Enterprise before 11.0.551, multiple pages are accessible without authentication or authorization.

3. CVE-2012-3823 Arial Campaign Enterprise before 11.0.551 stores passwords in clear text and these may be retrieved.

   Published 2020-01-10

   High·CVSS 7.5

   Arial Campaign Enterprise before 11.0.551 stores passwords in clear text and these may be retrieved.

4. CVE-2012-3822 Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials.

   Published 2020-01-10

   High·CVSS 7.5

   Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials.

5. CVE-2012-3820 Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow remote attackers to execute arbitrary SQL commands via the (1) SerialNumber field t...

   Published 2014-08-14

   High·CVSS 7.5

   Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow remote attackers to execute arbitrary SQL commands via the (1) SerialNumber field to activate.asp or (2) UID field to User-Edit.asp.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.