GCVE - cpe:2.3:a:arialsoftware:campaign_enterprise:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:arialsoftware:campaign_enterprise:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Arialsoftware (`5486821a-bee0-5c6d-a134-82ca70516e4f`)
Product	Campaign Enterprise (`e723f6fd-52fe-5b85-94ec-0e04785743a5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-3824`	vulnerable	2026-06-08 05:02:13.982958	Details available In Arial Campaign Enterprise before 11.0.551, multiple pages are accessible without authentication or authorization. Published: 2020-01-10T16:55:11.000Z Updated: 2024-08-06T20:21:02.875Z Open on db.gcve.eu Reference links http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html https://exchange.xforce.ibmcloud.com/vulnerabilities/79506	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3823`	vulnerable	2026-06-08 05:02:13.982666	Details available Arial Campaign Enterprise before 11.0.551 stores passwords in clear text and these may be retrieved. Published: 2020-01-10T16:52:44.000Z Updated: 2024-08-06T20:21:02.265Z Open on db.gcve.eu Reference links http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html https://exchange.xforce.ibmcloud.com/vulnerabilities/79510	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3822`	vulnerable	2026-06-08 05:02:13.982349	Details available Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials. Published: 2020-01-10T16:49:44.000Z Updated: 2024-08-06T20:21:03.689Z Open on db.gcve.eu Reference links http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html https://exchange.xforce.ibmcloud.com/vulnerabilities/79509	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3821`	vulnerable	2026-06-08 05:02:13.982012	Details available A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field. Published: 2020-01-10T19:21:51.000Z Updated: 2024-08-06T20:21:03.608Z Open on db.gcve.eu Reference links http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html https://exchange.xforce.ibmcloud.com/vulnerabilities/79508 http://archives.neohapsis.com/archives/bugtraq/2012-10/0103.html https://www.securityfocus.com/archive/1/524462 https://www.securityfocus.com/bid/56117/info	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3820`	vulnerable	2026-06-08 05:02:13.981562	Details available Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow remote attackers to execute arbitrary SQL commands via the (1) SerialNumber field to activate.asp or (2) UID field to User-Edit.asp. Published: 2014-08-14T14:00:00.000Z Updated: 2024-08-06T20:21:03.978Z Open on db.gcve.eu Reference links http://secunia.com/advisories/50969 http://osvdb.org/86492 http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html https://exchange.xforce.ibmcloud.com/vulnerabilities/79507 http://osvdb.org/86491	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.