CVE-2014-2043

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-03-13 · updated 2026-06-17
Weakness: CWE-89

Description

SQL injection vulnerability in Resources/System/Templates/Data.aspx in Procentia IntelliPen before 1.1.18.1658 allows remote authenticated users to execute arbitrary SQL commands via the value parameter.

Affected products

Procentia Intellipen: through 1.1.12.1520

References

http://seclists.org/fulldisclosure/2014/Mar/103
http://www.exploit-db.com/exploits/32212
http://www.securityfocus.com/archive/1/531426/100/0/threaded
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2043
http://seclists.org/fulldisclosure/2014/Mar/103
http://www.exploit-db.com/exploits/32212
http://www.securityfocus.com/archive/1/531426/100/0/threaded
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2043

Get alerted when CVE-2014-2043 or the next vulnerability affects your stack