![]() |
Inicial ▼ Bookkeeping
Online ▼ Auditorias ▼
DNS
Administrado ▼
Acerca de DNS
Ordenar/Renovar
Preguntas Frecuentes
AUP
Dynamic DNS Clients
Configurar Dominios Dynamic DNS Update Password Monitoreo
de Redes ▼
Enterprise
Avanzado
Estándarr
Prueba
Preguntas Frecuentes
Resumen de Precio/Funciones
Ordenar
Muestras
Configure/Status Alert Profiles | ||
ID de Prueba: | 1.3.6.1.4.1.25623.1.0.103586 |
Categoría: | Web application abuses |
Título: | Campaign Enterprise <= 11.0.538 Multiple Security Vulnerabilities - Active Check |
Resumen: | Campaign Enterprise is prone to multiple security; vulnerabilities including:;; - Multiple security bypass vulnerabilities;; - Multiple information disclosure vulnerabilities;; - Multiple SQL injection vulnerabilities |
Descripción: | Summary: Campaign Enterprise is prone to multiple security vulnerabilities including: - Multiple security bypass vulnerabilities - Multiple information disclosure vulnerabilities - Multiple SQL injection vulnerabilities Vulnerability Impact: Attackers can exploit these issues to bypass certain security restrictions, obtain sensitive information, and carry out unauthorized actions on the underlying database. Other attacks may also be possible. Affected Software/OS: Campaign Enterprise version 11.0.538 and probably prior. Solution: Updates are available. Please see the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P |
Referencia Cruzada: |
Common Vulnerability Exposure (CVE) ID: CVE-2012-3820 http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html http://osvdb.org/86491 http://osvdb.org/86492 http://secunia.com/advisories/50969 XForce ISS Database: campaign-activate-useredit-sql-injection(79507) https://exchange.xforce.ibmcloud.com/vulnerabilities/79507 Common Vulnerability Exposure (CVE) ID: CVE-2012-3821 http://archives.neohapsis.com/archives/bugtraq/2012-10/0103.html https://exchange.xforce.ibmcloud.com/vulnerabilities/79508 https://www.securityfocus.com/archive/1/524462 https://www.securityfocus.com/bid/56117/info Common Vulnerability Exposure (CVE) ID: CVE-2012-3822 XForce ISS Database: 79509 https://exchange.xforce.ibmcloud.com/vulnerabilities/79509 Common Vulnerability Exposure (CVE) ID: CVE-2012-3823 XForce ISS Database: 79510 https://exchange.xforce.ibmcloud.com/vulnerabilities/79510 Common Vulnerability Exposure (CVE) ID: CVE-2012-3824 XForce ISS Database: 79506 https://exchange.xforce.ibmcloud.com/vulnerabilities/79506 |
Copyright | Copyright (C) 2012 Greenbone AG |
Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |