Arialsoftware Campaign Enterprise
5 CVEs affecting Arialsoftware Campaign Enterprise. Latest disclosed: 2020-01-10. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2012-3824 | High | 7.5 | 2020-01-10 | In Arial Campaign Enterprise before 11.0.551, multiple pages are accessible without authentication or authorization. |
CVE-2012-3823 | High | 7.5 | 2020-01-10 | Arial Campaign Enterprise before 11.0.551 stores passwords in clear text and these may be retrieved. |
CVE-2012-3822 | High | 7.5 | 2020-01-10 | Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials. |
CVE-2012-3821 | Medium | 4.3 | 2020-01-10 | A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify… |
CVE-2012-3820 | | 2014-08-14 | Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow remote attackers to execute arbitrary SQL… |