CVE-2017-6050

CRITICAL

Ecava IntegraXor < 5.2.1231.0 - Unauthenticated SQL Injection

Title source: llm
STIX 2.1

Description

A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input, which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of SQL queries.

References (3)

Core 3
Core References
Third Party Advisory x_refsource_misc
https://www.tenable.com/security/research/tra-2017-24
Third Party Advisory, US Government Resource vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/99164
Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-17-171-01

Scores

CVSS v3 9.8
EPSS 0.0354
EPSS Percentile 88.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (2)
ecava/integraxor < 5.2.1231.0
n/a/Ecava IntegraXor Ecava IntegraXor
Published Jun 21, 2017
Tracked Since Feb 18, 2026