{"id": "EDB-ID:32212", "type": "exploitdb", "bulletinFamily": "exploit", "title": "Procentia IntelliPen 1.1.12.1520 Data.aspx, value param - Blind SQL Injection", "description": "Procentia IntelliPen 1.1.12.1520 (Data.aspx, value param) - Blind SQL Injection. CVE-2014-2043. Webapps exploit for asp platform", "published": "2014-03-12T00:00:00", "modified": "2014-03-12T00:00:00", "cvss": {"score": 6.5, "vector": "AV:NETWORK/AC:LOW/Au:SINGLE_INSTANCE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://www.exploit-db.com/exploits/32212/", "reporter": "Portcullis", "references": [], "cvelist": ["CVE-2014-2043"], "lastseen": "2016-02-03T16:26:53", "viewCount": 6, "enchantments": {"score": {"value": 6.8, "vector": "NONE", "modified": "2016-02-03T16:26:53", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2014-2043"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:30644", "SECURITYVULNS:VULN:13733"]}, {"type": "zdt", "idList": ["1337DAY-ID-22019"]}, {"type": "seebug", "idList": ["SSV:85511"]}, {"type": "exploitpack", "idList": ["EXPLOITPACK:6436A97D49878A38C235ED112EA9A829"]}, {"type": "packetstorm", "idList": ["PACKETSTORM:125684"]}], "modified": "2016-02-03T16:26:53", "rev": 2}, "vulnersScore": 6.8}, "sourceHref": "https://www.exploit-db.com/download/32212/", "sourceData": "CVE: \tCVE-2014-2043\r\nVendor: \tProcentia\r\nProduct: \tIntelliPen\r\nAffected version: \t1.1.12.1520\r\nFixed version: \t1.1.18.1658\r\nReported by: \tJerzy Kramarz\r\nDetails:\r\n\r\nSQL injection has been found and confirmed within the software as an authenticated user. A successful attack could allow an authenticated attacker to access information such as usernames and password hashes that are stored in the database.\r\n\r\nThe following URL and parameters have been confirmed to suffer from Blind SQL injection.\r\n\r\nhttp[s]://<host>/Resources/System/Templates/Data.aspx?DocID=1&field=JobID&value=1<SQL INJECTION>&JobID=1&ParentDocID=1694&InTab=1&ParentKey=JobNumber&NoStore=1&Popup=1\r\n\r\nThis vulnerability exists because \u2018value\u2019 variable is not sanitised before it is used as part of an SQL query to retrived specific job information.\r\nImpact:\r\n\r\nAn attacker would be able to exfiltrate the database, user credentials and in certain setup access the underling operating system.\r\nExploit:\r\n\r\nExploit code is not required.\r\nVendor status:\r\n07/01/2014 \tAdvisory created\r\n16/01/2014 \tVendor contacted\r\n21/02/2014 \tCVE obtained\r\n07/03/2014 \tPublished\r\nCopyright:\r\n\r\nCopyright \u00a9 Portcullis Computer Security Limited 2014, All rights reserved worldwide. Permission is hereby granted for the electronic redistribution of this information. It is not to be edited or altered in any way without the express written consent of Portcullis Computer Security Limited.\r\nDisclaimer:\r\n\r\nThe information herein contained may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user\u2019s risk. In no event shall the author/distributor (Portcullis Computer Security Limited) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.\r\n", "osvdbidlist": ["104282"]}
{"cve": [{"lastseen": "2020-11-29T23:21:54", "description": "SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows remote authenticated users to execute arbitrary SQL commands via the value parameter.", "edition": 4, "cvss3": {}, "published": "2014-03-13T14:55:00", "title": "CVE-2014-2043", "type": "cve", "cwe": ["CWE-89"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "SINGLE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2014-2043"], "modified": "2018-10-09T19:43:00", "cpe": ["cpe:/a:procentia:intellipen:1.1.12.1520"], "id": "CVE-2014-2043", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2043", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:procentia:intellipen:1.1.12.1520:*:*:*:*:*:*:*"]}], "securityvulns": [{"lastseen": "2018-08-31T11:10:52", "bulletinFamily": "software", "cvelist": ["CVE-2014-2043"], "description": "\r\n\r\nVulnerability title: SQL Injection in Procentia IntelliPen\r\nCVE: CVE-2014-2043\r\nVendor: Procentia\r\nProduct: IntelliPen\r\nAffected version: 1.1.12.1520\r\nFixed version: 1.1.18.1658\r\nReported by: Jerzy Kramarz\r\n\r\nDetails:\r\n\r\nSQL injection has been found and confirmed within the software as an\r\nauthenticated user. A successful attack could allow an authenticated\r\nattacker to access information such as usernames and password hashes\r\nthat are stored in the database.\r\n \r\n\r\nFurther details at:\r\nhttps://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2043/\r\n\r\n\r\nCopyright:\r\nCopyright (c) Portcullis Computer Security Limited 2014, All rights\r\nreserved worldwide. Permission is hereby granted for the electronic\r\nredistribution of this information. It is not to be edited or altered in\r\nany way without the express written consent of Portcullis Computer\r\nSecurity Limited.\r\n\r\nDisclaimer:\r\nThe information herein contained may change without notice. Use of this\r\ninformation constitutes acceptance for use in an AS IS condition. There\r\nare NO warranties, implied or otherwise, with regard to this information\r\nor its use. Any use of this information is at the user's risk. In no\r\nevent shall the author/distributor (Portcullis Computer Security\r\nLimited) be held liable for any damages whatsoever arising out of or in\r\nconnection with the use or spread of this information.\r\n\r\n", "edition": 1, "modified": "2014-05-05T00:00:00", "published": "2014-05-05T00:00:00", "id": "SECURITYVULNS:DOC:30644", "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:30644", "title": "CVE-2014-2043 - SQL Injection in Procentia IntelliPen", "type": "securityvulns", "cvss": {"score": 6.5, "vector": "AV:NETWORK/AC:LOW/Au:SINGLE_INSTANCE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2018-08-31T11:09:55", "bulletinFamily": "software", "cvelist": ["CVE-2013-6233", "CVE-2013-6231", "CVE-2014-2655", "CVE-2013-6429", "CVE-2012-2983", "CVE-2014-1879", "CVE-2014-1888", "CVE-2014-0053", "CVE-2014-2244", "CVE-2014-1206", "CVE-2014-1454", "CVE-2013-4152", "CVE-2014-2685", "CVE-2014-1216", "CVE-2014-2327", "CVE-2014-1224", "CVE-2014-2570", "CVE-2014-0097", "CVE-2014-2279", "CVE-2014-2332", "CVE-2014-1695", "CVE-2014-2280", "CVE-2014-2242", "CVE-2014-0054", "CVE-2012-2981", "CVE-2014-2330", "CVE-2014-2043", "CVE-2013-7106", "CVE-2012-2982", "CVE-2014-2682", "CVE-2014-1610", "CVE-2013-6453", "CVE-2013-6234", "CVE-2013-4568", "CVE-2013-6472", "CVE-2013-5951", "CVE-2014-2243", "CVE-2012-4893", "CVE-2014-2035", "CVE-2014-2040", "CVE-2014-2331", "CVE-2013-7196", "CVE-2013-7195", "CVE-2013-6452", "CVE-2014-2531", "CVE-2014-2329", "CVE-2014-1471", "CVE-2014-2684", "CVE-2013-6232", "CVE-2014-2326", "CVE-2014-1904", "CVE-2013-6451", "CVE-2014-1455", "CVE-2014-2278", "CVE-2014-1223", "CVE-2014-1222", "CVE-2014-1889", "CVE-2014-1694", "CVE-2013-7108", "CVE-2014-2683", "CVE-2014-2328", "CVE-2014-2681"], "description": "PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.", "edition": 1, "modified": "2014-05-05T00:00:00", "published": "2014-05-05T00:00:00", "id": "SECURITYVULNS:VULN:13733", "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:13733", "title": "Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)", "type": "securityvulns", "cvss": {"score": 8.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "zdt": [{"lastseen": "2018-04-11T11:52:40", "edition": 2, "description": "Procentia IntelliPen version 1.1.12.1520 suffers from a remote SQL injection vulnerability.", "published": "2014-03-12T00:00:00", "type": "zdt", "title": "Procentia IntelliPen 1.1.12.1520 - Blind SQL Injection Vulnerability", "bulletinFamily": "exploit", "cvelist": ["CVE-2014-2043"], "modified": "2014-03-12T00:00:00", "id": "1337DAY-ID-22019", "href": "https://0day.today/exploit/description/22019", "sourceData": "CVE: CVE-2014-2043\r\nVendor: Procentia\r\nProduct: IntelliPen\r\nAffected version: 1.1.12.1520\r\nFixed version: 1.1.18.1658\r\nReported by: Jerzy Kramarz\r\nDetails:\r\n \r\nSQL injection has been found and confirmed within the software as an authenticated user. A successful attack could allow an authenticated attacker to access information such as usernames and password hashes that are stored in the database.\r\n \r\nThe following URL and parameters have been confirmed to suffer from Blind SQL injection.\r\n \r\nhttp[s]://<host>/Resources/System/Templates/Data.aspx?DocID=1&field=JobID&value=1<SQL INJECTION>&JobID=1&ParentDocID=1694&InTab=1&ParentKey=JobNumber&NoStore=1&Popup=1\r\n \r\nThis vulnerability exists because \u2018value\u2019 variable is not sanitised before it is used as part of an SQL query to retrived specific job information.\r\nImpact:\r\n \r\nAn attacker would be able to exfiltrate the database, user credentials and in certain setup access the underling operating system.\r\nExploit:\r\n \r\nExploit code is not required.\r\nVendor status:\r\n07/01/2014 Advisory created\r\n16/01/2014 Vendor contacted\r\n21/02/2014 CVE obtained\r\n07/03/2014 Published\r\nCopyright:\r\n \r\nCopyright \u00a9 Portcullis Computer Security Limited 2014, All rights reserved worldwide. Permission is hereby granted for the electronic redistribution of this information. It is not to be edited or altered in any way without the express written consent of Portcullis Computer Security Limited.\r\nDisclaimer:\r\n \r\nThe information herein contained may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user\u2019s risk. In no event shall the author/distributor (Portcullis Computer Security Limited) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.\n\n# 0day.today [2018-04-11] #", "cvss": {"score": 6.5, "vector": "AV:NETWORK/AC:LOW/Au:SINGLE_INSTANCE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://0day.today/exploit/22019"}], "packetstorm": [{"lastseen": "2016-12-05T22:22:23", "description": "", "published": "2014-03-12T00:00:00", "type": "packetstorm", "title": "Procentia IntelliPen 1.1.12.1520 SQL Injection", "bulletinFamily": "exploit", "cvelist": ["CVE-2014-2043"], "modified": "2014-03-12T00:00:00", "id": "PACKETSTORM:125684", "href": "https://packetstormsecurity.com/files/125684/Procentia-IntelliPen-1.1.12.1520-SQL-Injection.html", "sourceData": "`Vulnerability title: SQL Injection in Procentia IntelliPen \nCVE: CVE-2014-2043 \nVendor: Procentia \nProduct: IntelliPen \nAffected version: 1.1.12.1520 \nFixed version: 1.1.18.1658 \nReported by: Jerzy Kramarz \n \nDetails: \n \nSQL injection has been found and confirmed within the software as an authenticated user. A successful attack could allow an authenticated attacker to access information such as usernames and password hashes that are stored in the database. \n \nThe following URL and parameters have been confirmed to suffer from Blind SQL injection. \n \nhttp[s]://<host>/Resources/System/Templates/Data.aspx?DocID=1&field=JobID&value=1<SQL INJECTION>&JobID=1&ParentDocID=1694&InTab=1&ParentKey=JobNumber&NoStore=1&Popup=1 \n \nThis vulnerability exists because \u2018value\u2019 variable is not sanitised before it is used as part of an SQL query to retrived specific job information. \n \n \nFurther details at: \nhttps://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2043/ \n \n \nCopyright: \nCopyright (c) Portcullis Computer Security Limited 2014, All rights \nreserved worldwide. Permission is hereby granted for the electronic \nredistribution of this information. It is not to be edited or altered in \nany way without the express written consent of Portcullis Computer \nSecurity Limited. \n \nDisclaimer: \nThe information herein contained may change without notice. Use of this \ninformation constitutes acceptance for use in an AS IS condition. There \nare NO warranties, implied or otherwise, with regard to this information \nor its use. Any use of this information is at the user's risk. In no \nevent shall the author/distributor (Portcullis Computer Security \nLimited) be held liable for any damages whatsoever arising out of or in \nconnection with the use or spread of this information. \n`\n", "cvss": {"score": 6.5, "vector": "AV:NETWORK/AC:LOW/Au:SINGLE_INSTANCE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://packetstormsecurity.com/files/download/125684/procentiaintellipen-sql.txt"}], "seebug": [{"lastseen": "2017-11-19T13:28:20", "description": "CVE: \tCVE-2014-2043\r\nVendor: \tProcentia\r\nProduct: \tIntelliPen\r\nAffected version: \t1.1.12.1520\r\nFixed version: \t1.1.18.1658\r\nReported by: \tJerzy Kramarz\r\nDetails:\r\n \r\nSQL injection has been found and confirmed within the software as an authenticated user. A successful attack could allow an authenticated attacker to access information such as usernames and password hashes that are stored in the database.\r\n \r\nThe following URL and parameters have been confirmed to suffer from Blind SQL injection.\r\n \r\nhttp[s]://<host>/Resources/System/Templates/Data.aspx?DocID=1&field=JobID&value=1<SQL INJECTION>&JobID=1&ParentDocID=1694&InTab=1&ParentKey=JobNumber&NoStore=1&Popup=1\r\n \r\nThis vulnerability exists because \ufffdvalue\ufffd variable is not sanitised before it is used as part of an SQL query to retrived specific job information.\r\nImpact:\r\n \r\nAn attacker would be able to exfiltrate the database, user credentials and in certain setup access the underling operating system.\r\nExploit:\r\n```\r\nExploit code is not required.\r\nVendor status:\r\n07/01/2014 \tAdvisory created\r\n16/01/2014 \tVendor contacted\r\n21/02/2014 \tCVE obtained\r\n07/03/2014 \tPublished\r\n ```\r\nCopyright:\r\nCopyright \ufffd Portcullis Computer Security Limited 2014, All rights reserved worldwide. Permission is hereby granted for the electronic redistribution of this information. It is not to be edited or altered in any way without the express written consent of Portcullis Computer Security Limited.\r\nDisclaimer:\r\n \r\nThe information herein contained may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user\ufffds risk. In no event shall the author/distributor (Portcullis Computer Security Limited) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.", "published": "2014-07-01T00:00:00", "type": "seebug", "title": "Procentia IntelliPen 1.1.12.1520 (Data.aspx, value param) - Blind SQL Injection", "bulletinFamily": "exploit", "cvelist": ["CVE-2014-2043"], "modified": "2014-07-01T00:00:00", "href": "https://www.seebug.org/vuldb/ssvid-85511", "id": "SSV:85511", "sourceData": "", "sourceHref": "", "cvss": {"score": 6.5, "vector": "AV:NETWORK/AC:LOW/Au:SINGLE_INSTANCE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "exploitpack": [{"lastseen": "2020-04-01T19:04:43", "description": "\nProcentia IntelliPen 1.1.12.1520 - data.aspx Blind SQL Injection", "edition": 1, "published": "2014-03-12T00:00:00", "title": "Procentia IntelliPen 1.1.12.1520 - data.aspx Blind SQL Injection", "type": "exploitpack", "bulletinFamily": "exploit", "cvelist": ["CVE-2014-2043"], "modified": "2014-03-12T00:00:00", "id": "EXPLOITPACK:6436A97D49878A38C235ED112EA9A829", "href": "", "sourceData": "CVE: \tCVE-2014-2043\nVendor: \tProcentia\nProduct: \tIntelliPen\nAffected version: \t1.1.12.1520\nFixed version: \t1.1.18.1658\nReported by: \tJerzy Kramarz\nDetails:\n\nSQL injection has been found and confirmed within the software as an authenticated user. A successful attack could allow an authenticated attacker to access information such as usernames and password hashes that are stored in the database.\n\nThe following URL and parameters have been confirmed to suffer from Blind SQL injection.\n\nhttp[s]://<host>/Resources/System/Templates/Data.aspx?DocID=1&field=JobID&value=1<SQL INJECTION>&JobID=1&ParentDocID=1694&InTab=1&ParentKey=JobNumber&NoStore=1&Popup=1\n\nThis vulnerability exists because \u2018value\u2019 variable is not sanitised before it is used as part of an SQL query to retrived specific job information.\nImpact:\n\nAn attacker would be able to exfiltrate the database, user credentials and in certain setup access the underling operating system.\nExploit:\n\nExploit code is not required.\nVendor status:\n07/01/2014 \tAdvisory created\n16/01/2014 \tVendor contacted\n21/02/2014 \tCVE obtained\n07/03/2014 \tPublished\nCopyright:\n\nCopyright \u00a9 Portcullis Computer Security Limited 2014, All rights reserved worldwide. Permission is hereby granted for the electronic redistribution of this information. It is not to be edited or altered in any way without the express written consent of Portcullis Computer Security Limited.\nDisclaimer:\n\nThe information herein contained may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user\u2019s risk. In no event shall the author/distributor (Portcullis Computer Security Limited) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.", "cvss": {"score": 6.5, "vector": "AV:N/AC:L/Au:S/C:P/I:P/A:P"}}]}
