Ecava IntegraXor < 4.1.4390 Buffer Overflow

Binary data 8398.prm...

Ecava IntegraXor < 3.71.4200 Directory Traversal

Binary data 8399.prm...

Ecava IntegraXor < 4.1.4369 Project Directory Information Disclosure

Binary data 8397.prm...

CVE-2014-2375

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service disk consumption, via the CSV export feature...

CVE-2014-2376

SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-2377

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag...

Code injection

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag...

Sql injection

SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-2375

CVE-2014-2375 affects Ecava IntegraXor SCADA Server (Stable 4.1.4360 and earlier; Beta 4.1.4392 and earlier) via the CSV export feature, which allows an unauthenticated user to read or write arbitrary files and potentially cause a denial of service. The root cause is External Control of File Name...

CVE-2014-2375 Ecava IntegraXor SCADA Server External Control of File Name or Path

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service disk consumption, via the CSV export feature...

CVE-2014-2376 Ecava IntegraXor SCADA Server SQL Injection

SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-2377 Ecava IntegraXor SCADA Server Information Exposure Through Environmental Variables

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full pathnames via an application tag...

CVE-2014-2376

CVE-2014-2376 refers to an SQL injection vulnerability in Ecava IntegraXor SCADA Server, affecting stable 4.1.4360 and earlier and beta 4.1.4392 and earlier. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors, enabling potential reading/modifying of files ...

CVE-2014-2377

The CVE-2014-2377 entry affects Ecava IntegraXor SCADA Server versions 4.1.4360 and earlier (stable) and 4.1.4392 and earlier (beta), where built-in application tags can disclose full pathnames via environmental variables, enabling information exposure. Affected component: IntegraXor SCADA Server...

Four Vulnerabilities Patched in SCADA Server

Four different remotely exploitable vulnerabilities were recently discovered and patched in a popular SCADA server. The vulnerabilities exist in some versions of IntegraXor, a SCADA server manufactured by Ecava Sdn Bhd, a Malaysian-based software company. The Industrial Control Systems Cyber...

Ecava IntegraXor Remote ActiveX Buffer Overflow PoC

No description provided by source. !/usr/bin/python intx.py Ecava IntegraXor Remote ActiveX Buffer Overflow PoC Jeremy Brown December 2010 http://www.integraxor.com/ There is a stack-based buffer overflow in IntegraXor that can be triggered by passing an overly large value to the save method of t...

ecava integraxor 3.6.4000.0 - Directory Traversal

No description provided by source. Source: http://aluigi.org/adv/integraxor1-adv.txt Luigi Auriemma Application: Ecava IntegraXor http://www.integraxor.com Versions: = 3.6.4000.0 Platforms: Windows Bug : directory traversal Exploitation: remote, versus server Date: 21 Dec 2010 Author: Luigi...

Ecava IntegraXor Buffer Overflow (CVE-2010-4597)

A remote code execution vulnerability has been reported in Ecava IntegraXor. The vulnerability is due to a stack based buffer overflow when handling specially crafted packets...

ECAVA IntegraXor Detection (HTTP)

HTTP based detection of ECAVA IntegraXor. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.804298"...

ECAVA IntegraXor < 4.1.4393 Account Information Disclosure Vulnerability

ECAVA IntegraXor is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...