14 matches found
EUVD-2014-2095
Malware in sbrugna...
Procentia IntelliPen 1.1.12.1520 (Data.aspx, value param) - Blind SQL Injection
CVE: CVE-2014-2043 Vendor: Procentia Product: IntelliPen Affected version: 1.1.12.1520 Fixed version: 1.1.18.1658 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the software as an authenticated user. A successful attack could allow an authenticated attacker ...
CVE-2014-2043 - SQL Injection in Procentia IntelliPen
Vulnerability title: SQL Injection in Procentia IntelliPen CVE: CVE-2014-2043 Vendor: Procentia Product: IntelliPen Affected version: 1.1.12.1520 Fixed version: 1.1.18.1658 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the software as an authenticated user....
CVE-2014-2043
SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows remote authenticated users to execute arbitrary SQL commands via the value parameter...
CVE-2014-2043
SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows remote authenticated users to execute arbitrary SQL commands via the value parameter...
Sql injection
SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows remote authenticated users to execute arbitrary SQL commands via the value parameter...
CVE-2014-2043
SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows remote authenticated users to execute arbitrary SQL commands via the value parameter...
CVE-2014-2043
Summary: CVE-2014-2043 affects Procentia’s IntelliPen (vendor Procentia), specifically the Data.aspx path in the Resources/System/Templates/Data.aspx page. Affected version: 1.1.12.1520 (and likely related builds prior to 1.1.18.1658). Root cause: SQL injection due to the unsanitised use of the v...
PT-2014-4447
Name of the Vulnerable Software and Affected Versions Procentia IntelliPen versions prior to 1.1.18.1658 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the value parameter in the Resources/System/Templates/Data.aspx file...
CVE-2014-2043: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows remote authenticated users to execute arbitrary SQL commands via the value parameter...
Procentia IntelliPen 1.1.12.1520 SQL Injection
Vulnerability title: SQL Injection in Procentia IntelliPen CVE: CVE-2014-2043 Vendor: Procentia Product: IntelliPen Affected version: 1.1.12.1520 Fixed version: 1.1.18.1658 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the software as an authenticated user....
Procentia IntelliPen 1.1.12.1520 - Blind SQL Injection Vulnerability
Procentia IntelliPen version 1.1.12.1520 suffers from a remote SQL injection vulnerability. CVE: CVE-2014-2043 Vendor: Procentia Product: IntelliPen Affected version: 1.1.12.1520 Fixed version: 1.1.18.1658 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the...
Procentia IntelliPen 1.1.12.1520 - data.aspx Blind SQL Injection
Procentia IntelliPen 1.1.12.1520 - data.aspx Blind SQL Injection CVE: CVE-2014-2043 Vendor: Procentia Product: IntelliPen Affected version: 1.1.12.1520 Fixed version: 1.1.18.1658 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the software as an authenticated...
Procentia IntelliPen 1.1.12.1520 - 'data.aspx' Blind SQL Injection
CVE: CVE-2014-2043 Vendor: Procentia Product: IntelliPen Affected version: 1.1.12.1520 Fixed version: 1.1.18.1658 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the software as an authenticated user. A successful attack could allow an authenticated attacker ...