Vulnerability Details CVE-2012-3821
A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.2%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
References
- http://archives.neohapsis.com/archives/bugtraq/2012-10/0103.html
- http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79508
- https://www.securityfocus.com/archive/1/524462
- https://www.securityfocus.com/bid/56117/info
- http://archives.neohapsis.com/archives/bugtraq/2012-10/0103.html
- http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79508
- https://www.securityfocus.com/archive/1/524462
- https://www.securityfocus.com/bid/56117/info
Products affected by CVE-2012-3821
-
cpe:2.3:a:arialsoftware:campaign_enterprise:11.0.551