CVE-2017-6050
CriticalSummary
A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input, which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of SQL queries.
Risk Assessment
The risk to the organization is the potential for remote code execution by an unauthorized user, which could lead to data loss or system takeover.
Recommendation
It is recommended to update the application to the latest version that includes security patches and to implement additional input validation mechanisms.
Other vulnerabilities in Ecava IntegraXor
See all- CVE-2016-2299High
CVE-2016-2299 is an SQL injection vulnerability in Ecava IntegraXor before version 5.0 build 4522 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
- CVE-2014-0786High
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.
Original NVD description (English source)
A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input, which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of SQL queries.