Campaign Enterprise Multiple Security Vulnerabilities
BID:56117
CVE-2012-3821 |Info
Campaign Enterprise Multiple Security Vulnerabilities
| Bugtraq ID: | 56117 |
| Class: | Unknown |
| CVE: |
CVE-2012-3820 CVE-2012-3821 CVE-2012-3822 CVE-2012-3823 CVE-2012-3824 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 18 2012 12:00AM |
| Updated: | Oct 18 2012 12:00AM |
| Credit: | Ken |
| Vulnerable: |
Arial Software Campaign Enterprise 11.0.538 |
| Not Vulnerable: |
Arial Software Campaign Enterprise 11.0.551 |
Discussion
Campaign Enterprise Multiple Security Vulnerabilities
Campaign Enterprise is prone to multiple security vulnerabilities including:
1. Multiple security-bypass vulnerabilities
2. Multiple information-disclosure vulnerabilities
3. Multiple SQL injection vulnerabilities
Attackers can exploit these issues to bypass certain security restrictions, obtain sensitive information, and carry out unauthorized actions on the underlying database. Other attacks may also be possible.
Campaign Enterprise 11.0.538 is vulnerable.
Campaign Enterprise is prone to multiple security vulnerabilities including:
1. Multiple security-bypass vulnerabilities
2. Multiple information-disclosure vulnerabilities
3. Multiple SQL injection vulnerabilities
Attackers can exploit these issues to bypass certain security restrictions, obtain sensitive information, and carry out unauthorized actions on the underlying database. Other attacks may also be possible.
Campaign Enterprise 11.0.538 is vulnerable.
Solution / Fix
Campaign Enterprise Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Campaign Enterprise Multiple Security Vulnerabilities
References:
References:
- Campaign Enterprise Homepage (Arial Software)
- Multiple Vulnerabilities in Campaign Enterprise <= 11.0.538 (Ken)