CVE-2016-8341

Critical

Published: 13/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in Ecava IntegraXor Version 5.0.413.0 related to SQL injection vulnerability in the web server. Unsanitized parameters may lead to unauthorized access to the database.

Risk Assessment

The organization may be exposed to unauthorized database operations such as read, write, and delete commands, potentially compromising the confidentiality and integrity of information.

Recommendation

It is recommended to implement proper SQL query sanitization mechanisms and update to the latest software version to minimize risk.

Original NVD description (English source)

An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server has parameters that are vulnerable to SQL injection. If the queries are not sanitized, the host's database could be subject to read, write, and delete commands.