All packages
Ecava IntegraXor vulnerabilities
3 known CVE vulnerabilities in Ecava IntegraXor, translated and rated.
- CVE-2016-2299High
CVE-2016-2299 is an SQL injection vulnerability in Ecava IntegraXor before version 5.0 build 4522 that allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
- CVE-2014-0786High
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.
- CVE-2017-6050Critical
A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input, which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of SQL queries.