What’s Vulnerable › Vulnerabilities

CVE-2012-3820

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-08-14 · updated 2026-06-16
• Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow remote attackers to execute arbitrary SQL commands via the (1) SerialNumber field to activate.asp or (2) UID field to User-Edit.asp.

Affected products

• Arialsoftware Campaign Enterprise: through 11.0.538

References

• http://osvdb.org/86491
• http://osvdb.org/86492
• http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html
• http://secunia.com/advisories/50969
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79507
• http://osvdb.org/86491
• http://osvdb.org/86492
• http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html
• http://secunia.com/advisories/50969
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79507

Get alerted when CVE-2012-3820 or the next vulnerability affects your stack