Ecava IntegraXor Project Directory Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Ecava IntegraXor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the storing of credentials in cleartext. The issue lies in the ability to bypass file...

Ecava IntegraXor ActiveX Buffer Overflow

Overview This advisory provides mitigation details for a vulnerability that impacts the Ecava IntegraXor application. Independent researcher Andrew Brooks has identified a buffer overflow vulnerability in Ecava’s IntegraXor application. Ecava has produced a patch that mitigates this vulnerability...

Bug Bounty to Reward Researchers with Redeemable Points

IntegraXor, a manufacturer of supervisory control and data acquisition SCADA equipment, announced last week that it would implement a bug bounty program offering points redeemable for company services to researchers that disclose security vulnerabilities in their IGX SCADA system. In most bug...

Ecava IntegraXor < 4.0.4283 ActiveX Remote Buffer Overflow

Binary data 6697.prm...

Ecava IntegraXor < 4.00.4283 ActiveX Remote Buffer Overflow

Binary data scadaintegraxor4004283.nbin...

CVE-2012-4700

Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlier allow remote attackers to execute arbitrary code via a crafted HTML document...

Buffer overflow

Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlier allow remote attackers to execute arbitrary code via a crafted HTML document...

CVE-2012-4700

CVE-2012-4700: A buffer overflow in the PE3DO32A.ocx ActiveX control of IntegraXor SCADA Server (version 4.00 build 4250.0 and earlier) allows remote code execution via a crafted HTML page. The vulnerability originates in buffer overflows within the ActiveX component, with CVSS v2 base score 9.3 ...

CVE-2012-4700

Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlier allow remote attackers to execute arbitrary code via a crafted HTML document...

Ecava IntegraXor ActiveX Directory Traversal

Overview Independent researchers Billy Rios and Terry McCorkle have identified a Path Traversal vulnerability in the Ecava IntegraXor application. Ecava has produced an update that mitigates this vulnerability. The researchers have validated that the patch fixes this vulnerability. Affected...

Ecava IntegraXor igcom.dll Traversal Arbitrary File Overwrite

Binary data scadaintegraxor3714200.nbin...

CVE-2012-0246

Directory traversal vulnerability in an unspecified ActiveX control in Ecava IntegraXor before 3.71.4200 allows remote attackers to execute arbitrary code via vectors involving an HTML document on the server...

Directory traversal

Directory traversal vulnerability in an unspecified ActiveX control in Ecava IntegraXor before 3.71.4200 allows remote attackers to execute arbitrary code via vectors involving an HTML document on the server...

CVE-2012-0246

Directory traversal vulnerability in an unspecified ActiveX control in Ecava IntegraXor before 3.71.4200 allows remote attackers to execute arbitrary code via vectors involving an HTML document on the server...

CVE-2012-0246

Ecava IntegraXor is affected by CVE-2012-0246 via a path traversal vulnerability in an ActiveX control. Affected products are IntegraXor versions older than 3.71.4200; exploitation involves opening a specially crafted HTML document on the server (notable to be exploitable through Internet Explore...

Ecava IntegraXor SQL

Overview ICS-CERT has received a report from independent security researcher Dan Rosenberg with Virtual Security Research VSR of an unauthenticated Structured Query Language SQL vulnerability in the Ecava IntegraXor human machine interface HMI product that could allow data leakage, data...

Ecava IntegraXor Multiple Cross-Site Scripting Vulnerabilities (Windows)

This host is installed with Ecava IntegraXor and is prone to cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbecavaintegraxormultxssvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Ecava IntegraXor Multiple Cross-Site Scripting Vulnerabilities Windows Authors: Rachana Shetty...

Ecava IntegraXor Multiple Cross-Site Scripting Vulnerabilities - Windows

Ecava IntegraXor is prone to cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2958

Multiple cross-site scripting XSS vulnerabilities in Ecava IntegraXor before 3.60 Build 4080 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ecava IntegraXor before 3.60 Build 4080 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...