CVE-2012-3820

high

Description

Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow remote attackers to execute arbitrary SQL commands via the (1) SerialNumber field to activate.asp or (2) UID field to User-Edit.asp.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/79507

http://secunia.com/advisories/50969

http://osvdb.org/86492

http://osvdb.org/86491

Details

Source: Mitre, NVD

Published: 2014-08-14

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H