250 matches found
Sql injection
Ecava IntegraXor HMI before n 3.60 Build 4032 allows remote attackers to bypass authentication and execute arbitrary SQL statements via unspecified vectors related to a crafted POST request. NOTE: some sources have reported this issue as SQL injection, but this might not be accurate...
CVE-2011-1562
Ecava IntegraXor HMI prior to version 3.60 (Build 4032) is vulnerable to an unauthenticated SQL statement execution via a crafted HTTP POST request. The vulnerability could lead to data leakage, data manipulation, and remote code execution on the backend database service. Ecava has released a pat...
CVE-2011-1562
Ecava IntegraXor HMI before n 3.60 Build 4032 allows remote attackers to bypass authentication and execute arbitrary SQL statements via unspecified vectors related to a crafted POST request. NOTE: some sources have reported this issue as SQL injection, but this might not be accurate...
CVE-2011-1562: Improper Neutralization of Special Elements used in an SQL Command
Ecava IntegraXor HMI before n 3.60 Build 4032 allows remote attackers to bypass authentication and execute arbitrary SQL statements via unspecified vectors related to a crafted POST request. NOTE: some sources have reported this issue as SQL injection, but this might not be accurate...
Ecava IntegraXor未明SQL注入漏洞
Bugtraq ID: 47019 Ecava IntegraXor是一款使用HTML和SVG的人机接口产品。 Ecava IntegraXor存在一个未明SQL注入漏洞，允许远程攻击者提交特制的HTTP POST请求获得敏感数据，操作数据或执行任意代码。 Ecava IntegraXor 3.60.4032 Ecava IntegraXor 3.60 Ecava IntegraXor 3.6.4000.0 Ecava IntegraXor 3.5.3900.5 Ecava IntegraXor 3.5.3900.10 Ecava IntegraXor 3.5 厂商解决方案...
Ecava IntegraXor web service allows directory traversal outside of web root
Overview Ecava IntegraXor contains a directory traversal vulnerability Description According to Ecava's website: IntegraXor is a suite of tools used to create and run a web-based HMI interface for a Supervisory Control and Data Acquisition SCADA system. Ecava IntegraXor runs a web service that...
ECAVA IntegraXor <= 3.6.4000.0 Directory Traversal Vulnerability - Active Check
ECAVA IntegraXor is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2010-4599
Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2010-4598
Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in an open request...
Design/Logic Flaw
Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Directory traversal
Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in an open request...
CVE-2010-4597
Ecava IntegraXor HMI is affected by CVE-2010-4597 due to a stack-based buffer overflow in the save method of igcomm.dll (IntegraXor.Project ActiveX) prior to version 3.5.3900.10. An attacker could remotely trigger arbitrary code execution by sending a long string in the second argument. ICS-CERT ...
CVE-2010-4598
The Ecava IntegraXor web service (versions 3.6.4000.0 and earlier) is vulnerable to a directory traversal vulnerability. A remote attacker can exploit this by supplying a crafted URL containing .. (dot dot) sequences in the file_name parameter of an
CVE-2010-4598
Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in an open request...
CVE-2010-4599
CVE-2010-4599: Affected product is Ecava IntegraXor (v3.6.4000.0). The vulnerability is an untrusted search path that lets local attackers elevate privileges by placing a malicious dwmapi.dll in the current working directory. This yields local privilege escalation for the attacker within the affe...
CVE-2010-4599
Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2010-4599: Undefined Security Weakness
Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2010-4597: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-Machine Interface HMI before 3.5.3900.10 allows remote attackers to execute arbitrary code via a long string in the second argument...
CVE-2010-4598: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in an open request...
