CVE-2016-2299
HighSummary
CVE-2016-2299 is an SQL injection vulnerability in Ecava IntegraXor before version 5.0 build 4522 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Risk Assessment
Attackers can exploit this vulnerability to gain unauthorized access to the database, potentially leading to data theft or deletion.
Recommendation
It is recommended to update Ecava IntegraXor to version 5.0 build 4522 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Ecava IntegraXor
See all- CVE-2014-0786High
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.
- CVE-2017-6050Critical
A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input, which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of SQL queries.
Original NVD description (English source)
SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.