Ecava IntegraXor web service allows directory traversal outside of web root

Overview Ecava IntegraXor contains a directory traversal vulnerability Description According to Ecava's website: IntegraXor is a suite of tools used to create and run a web-based HMI interface for a Supervisory Control and Data Acquisition SCADA system. Ecava IntegraXor runs a web service that...

ECAVA IntegraXor <= 3.6.4000.0 Directory Traversal Vulnerability - Active Check

ECAVA IntegraXor is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2010-4598

The Ecava IntegraXor web service (versions 3.6.4000.0 and earlier) is vulnerable to a directory traversal vulnerability. A remote attacker can exploit this by supplying a crafted URL containing .. (dot dot) sequences in the file_name parameter of an