CVE-2014-2043: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows remote authenticated users to execute arbitrary SQL commands via the value parameter...

PT-2014-4447

Name of the Vulnerable Software and Affected Versions Procentia IntelliPen versions prior to 1.1.18.1658 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the value parameter in the Resources/System/Templates/Data.aspx file...