CVE-2014-0786
HighSummary
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.
Risk Assessment
Attackers can gain access to sensitive login information, potentially leading to unauthorized access to the system.
Recommendation
It is recommended to upgrade to version 4.1.4393 or later to mitigate this vulnerability.
Other vulnerabilities in Ecava IntegraXor
See all- CVE-2016-2299High
CVE-2016-2299 is an SQL injection vulnerability in Ecava IntegraXor before version 5.0 build 4522 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
- CVE-2017-6050Critical
A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input, which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of SQL queries.
Original NVD description (English source)
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.