CVE-2014-100035: Licensepal Arcticdesk

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in the ticket grid in the admin interface in LicensePal ArcticDesk before 1.2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

• Licensepal Arcticdesk: up to and including 1.2.4

Published 2015-01-13. Last modified 2026-06-17.