CVE-2017-6050
CriticalSummary
A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input, which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of SQL queries.
Risk Assessment
The risk to the organization is the potential for remote code execution by an unauthorized user, which could lead to data loss or system takeover.
Recommendation
It is recommended to update the application to the latest version that includes security patches and to implement additional input validation mechanisms.
Original NVD description (English source)
A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input, which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of SQL queries.