CVE-2014-100035

2022-10-0316:20:38

mitre

www.cve.org

cve-2014-100035

sql injection

licensepal arcticdesk

admin interface

arbitrary sql commands

8.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.0%

JSON

SQL injection vulnerability in the ticket grid in the admin interface in LicensePal ArcticDesk before 1.2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

www.arcticdesk.com/support/announcements/arcticdesk-v1-2-5-maintenance-release-18.html