Ecava IntegraXor 5.0.413.0 getdata Requests Handling Multiple SQLi

Binary data scadaappecavaintegraxor527222.nbin...

Ecava IntegraXor getdata name SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Ecava IntegraXor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the name parameter in getdata requests. The issue lies in the failure...