CVE-2010-4598

🗓️ 23 Dec 2010 17:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 83 Views🌐 WEB

Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary file

Reporter	Title	Published	Views	Family All 10
Tenable Nessus	Ecava IntegraXor < 3.6.4000.1 Directory Traversal	25 Sep 201400:00	–	nessus
Cvelist	CVE-2010-4598	23 Dec 201017:00	–	cvelist
Exploit DB	ecava IntegraXor 3.6.4000.0 - Directory Traversal	21 Dec 201000:00	–	exploitdb
EUVD	EUVD-2010-4564	7 Oct 202500:30	–	euvd
ICS	GLEG Agora SCADA+ Exploit Pack	6 Sep 201812:00	–	ics
NVD	CVE-2010-4598	23 Dec 201018:00	–	nvd
OpenVAS	ECAVA IntegraXor <= 3.6.4000.0 Directory Traversal Vulnerability - Active Check	27 Dec 201000:00	–	openvas
Prion	Directory traversal	23 Dec 201018:00	–	prion
CERT	Ecava IntegraXor web service allows directory traversal outside of web root	11 Jan 201100:00	–	cert
VulnCheck KEV	VulnCheck KEV: CVE-2010-4598	12 Jan 202200:00	–	vulncheck_kev

NVD

Node

ecava integraxorRange≤3.6.4000.0

ecava integraxorMatch3.5.3900.5

ecava integraxorMatch3.5.3900.10

Source	Link
secunia	www.secunia.com/advisories/42730
kb	www.kb.cert.org/vuls/id/979776
us-cert	www.us-cert.gov/control_systems/pdf/ICS-ALERT-10-355-01.pdf
exploit-db	www.exploit-db.com/exploits/15802
vupen	www.vupen.com/english/advisories/2010/3304
integraxor	www.integraxor.com/blog/integraxor-3-6-scada-security-issue-20101222-0323-vulnerability-note
aluigi	www.aluigi.org/adv/integraxor_1-adv.txt
securityfocus	www.securityfocus.com/bid/45535

Parameter	Position	Path	Description	CWE
file_name	query param	/PROJECT_NAME/open	Directory traversal vulnerability via open endpoint allowing reading arbitrary files through dot-dot sequences in the file_name parameter.	CWE-22

16 Jun 2026 23:25Current

6.8Medium risk

Vulners AI Score6.8

CVSS 25

EPSS0.26482