Unrated severityNVD Advisory· Published Aug 14, 2014· Updated May 6, 2026

CVE-2012-3820

Description

Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow remote attackers to execute arbitrary SQL commands via the (1) SerialNumber field to activate.asp or (2) UID field to User-Edit.asp.

Affected products

Arialsoftware/Campaign Enterprise
cpe:2.3:a:arialsoftware:campaign_enterprise:*:*:*:*:*:*:*:*
Range: <=11.0.538

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.htmlnvdExploit
osvdb.org/86491nvd
osvdb.org/86492nvd
secunia.com/advisories/50969nvd
exchange.xforce.ibmcloud.com/vulnerabilities/79507nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000