Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
campaign vulnerabilities and exploits
(subscribe to this query)
570
VMScore
CVE-2013-3264
The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to (1) list/edit.php and (2) campaign/editCampaign.php, which allows remote malicious users to modify list or campaign data.
Smackcoders Wp Ultimate Email Marketer Plugin 1.0.3
Smackcoders Wp Ultimate Email Marketer Plugin 1.0.2
Smackcoders Wp Ultimate Email Marketer Plugin 1.0.1
Smackcoders Wp Ultimate Email Marketer Plugin 1.0.0
Smackcoders Wp Ultimate Email Marketer Plugin
570
VMScore
CVE-2013-0382
Unspecified vulnerability in the Oracle Marketing component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote malicious users to affect confidentiality and integrity via unknown vectors related to Campaign Management.
Oracle E-business Suite 11.5.10.2
Oracle E-business Suite 12.0.6
Oracle E-business Suite 12.1.1
Oracle E-business Suite 12.1.2
Oracle E-business Suite 12.1.3
668
VMScore
CVE-2012-4498
The Activism module 6.x-2.x prior to 6.x-2.1 for Drupal does not properly restrict access to the "Campaign" content type, which might allow remote malicious users to bypass access restrictions and possibly have other unspecified impact.
Morbus Iff Activism 6.x-2.0
Morbus Iff Activism 6.x-2.x
383
VMScore
CVE-2012-4484
Cross-site scripting (XSS) vulnerability in the administrative interface in the Campaign Monitor module prior to 6.x-2.5 for Drupal allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this refers to an issue in an independently deve...
Trexart Campaignmonitor 6.x-2.1
Trexart Campaignmonitor 6.x-1.x-dev
Trexart Campaignmonitor
Trexart Campaignmonitor 6.x-2.3
Trexart Campaignmonitor 6.x-2.2
Trexart Campaignmonitor 6.x-2.x
Trexart Campaignmonitor 6.x-1.1
668
VMScore
CVE-2012-4990
SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote malicious users to execute arbitrary SQL commands via the ids[] parameter in a link action.
Openx Openx 2.8.10
937
VMScore
CVE-2012-0158
The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2...
Microsoft Office 2010
Microsoft Office 2003
Microsoft Office Web Components 2003
Microsoft Office 2007
Microsoft Sql Server 2000
Microsoft Sql Server 2008
Microsoft Sql Server 2005
Microsoft Biztalk Server 2002
Microsoft Commerce Server 2002
Microsoft Commerce Server 2007
Microsoft Commerce Server 2009
Microsoft Visual Foxpro 8.0
Microsoft Visual Foxpro 9.0
Microsoft Visual Basic 6.0
1 EDB exploit
8 Github repositories
44 Articles
935
VMScore
CVE-2012-0754
Adobe Flash Player prior to 10.3.183.15 and 11.x prior to 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; prior to 11.1.111.6 on Android 2.x and 3.x; and prior to 11.1.115.6 on Android 4.x allows malicious users to execute arbitrary code or cause a denial of service (memory...
Adobe Flash Player
1 EDB exploit
1 Article
383
VMScore
CVE-2011-0451
Multiple cross-site scripting (XSS) vulnerabilities in (1) data/Smarty/templates/default/list.tpl and (2) data/Smarty/templates/default/campaign/bloc/cart_tag.tpl in EC-CUBE prior to 2.4.4 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors...
Lockon Ec-cube
Lockon Ec-cube 2.1.2
Lockon Ec-cube 1.4.5
Lockon Ec-cube 1.4.0
Lockon Ec-cube 1.3.3
Lockon Ec-cube 1.3.0
Lockon Ec-cube 1.1.0
Lockon Ec-cube 2.11.0
Lockon Ec-cube 2.3.0
Lockon Ec-cube 2.2.1
Lockon Ec-cube 2.2.0
Lockon Ec-cube 1.4.6
Lockon Ec-cube 1.3.4
Lockon Ec-cube 1.4.1
Lockon Ec-cube 1.2.0
Lockon Ec-cube 1.3.1
Lockon Ec-cube 2.4.4
Lockon Ec-cube 2.4.1
Lockon Ec-cube 2.4.2
Lockon Ec-cube 2.0.1
Lockon Ec-cube 2.0.0
Lockon Ec-cube 1.5.0
383
VMScore
CVE-2008-7092
Multiple cross-site scripting (XSS) vulnerabilities in Unica Affinium Campaign 7.2.1.0.55 allow remote malicious users to inject arbitrary web script or HTML via a Javascript event in the (1) url, (2) PageName, and (3) title parameters in a CustomBookMarkLink action to Campaign/C...
Unica Affinium Campaign 7.2.1.0.55
605
VMScore
CVE-2008-7093
Multiple directory traversal vulnerabilities in Unica Affinium Campaign 7.2.1.0.55 allow remote malicious users to (1) create arbitrary directories or files via a .. (dot dot) in the folder name in the new folder functionality or (2) list arbitrary files via a crafted request to ...
Unica Affinium Campaign 7.2.1.0.55
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073
CVE-2024-5496
CVE-2024-5495
XPath injection
bypass
CVE-2024-30043
CVE-2024-24919
denial of service
CVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
NEXT »