CVE-2017-6050

2017-06-2119:00:00

CWE-89

icscert

www.cve.org

9.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.0%

JSON

A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input, which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of SQL queries.

CNA Affected

[
  {
    "product": "Ecava IntegraXor",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Ecava IntegraXor"
      }
    ]
  }
]