CVE-2016-8341 in IntegraXor

Résumé

par MITRE

An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server has parameters that are vulnerable to SQL injection. If the queries are not sanitized, the host's database could be subject to read, write, and delete commands.

Be aware that VulDB is the high quality source for vulnerability data.

• Réserver: 28/09/2016
• Divulgation: 13/02/2017
• Modérer: accepté
• Entrée: VDB-96859
• CPE: prêt
• CWE: CWE-89 (confirmé)
• CVSS: 9.8 (NVD)
• EPSS: 0.01645
• KEV: non
• Activités: très faible
• Secteur: Chemical, Transportation, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-8341
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-8341
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-8341/