Procentia IntelliPen 1.1.12.1520 (Data.aspx, value param) - Blind SQL Injection

CVE: CVE-2014-2043 Vendor: Procentia Product: IntelliPen Affected version: 1.1.12.1520 Fixed version: 1.1.18.1658 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the software as an authenticated user. A successful attack could allow an authenticated attacker ...

CVE-2014-2043

SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows remote authenticated users to execute arbitrary SQL commands via the value parameter...

Sql injection

SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows remote authenticated users to execute arbitrary SQL commands via the value parameter...

PT-2014-4447

Name of the Vulnerable Software and Affected Versions Procentia IntelliPen versions prior to 1.1.18.1658 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the value parameter in the Resources/System/Templates/Data.aspx file...

CVE-2014-2043: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows remote authenticated users to execute arbitrary SQL commands via the value parameter...