CVE-2012-3802

MediumCVSS 4.0/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote authenticated users to read the commissions of other users via unknown attack vectors.

Metrics

CVSS 2.0 4.0/10AV:N/AC:L/Au:S/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jun 27, 2012
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-38054.3Multiple cross-site scripting (XSS) vulnerabilities in the getAllPassedParams function in system/functions.php in Kajona before 3.4.2 allow CVE-2012-38067.5Samsung Kies before 2.5.0.12094_27_11 contains a NULL pointer dereference vulnerability which could allow remote attackers to perform a deniCVE-2012-38079.8Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.CVE-2012-38087.5Samsung Kies before 2.5.0.12094_27_11 has arbitrary file modification.CVE-2012-38097.5Samsung Kies before 2.5.0.12094_27_11 has arbitrary directory modification.CVE-2012-38107.5Samsung Kies before 2.5.0.12094_27_11 has registry modification.CVE-2012-381110.0Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 beforeCVE-2012-38124.0Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Certified Asterisk 1CVE-2012-38147.5Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote attackers to executeCVE-2012-38159.3Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attackerCVE-2012-38167.8WinRadius Server 2009 allows remote attackers to cause a denial of service (crash) via a long password in an Access-Request packet.CVE-2012-38177.8ISC BIND 9.4.x, 9.5.x, 9.6.x, and 9.7.x before 9.7.6-P2; 9.8.x before 9.8.3-P2; 9.9.x before 9.9.1-P2; and 9.6-ESV before 9.6-ESV-R7-P2, whe
CVE-2012-3802: Medium severity, CVSS 4.0 | Vulnix