PT-2012-2437

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor versions prior to 3.71.4200 Description A directory traversal issue exists in an unspecified ActiveX control, allowing remote attackers to execute arbitrary code via vectors involving an HTML document on the server...

Ecava IntegraXor SQL

Overview ICS-CERT has received a report from independent security researcher Dan Rosenberg with Virtual Security Research VSR of an unauthenticated Structured Query Language SQL vulnerability in the Ecava IntegraXor human machine interface HMI product that could allow data leakage, data...

Ecava IntegraXor Multiple Cross-Site Scripting Vulnerabilities - Windows

Ecava IntegraXor is prone to cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ecava IntegraXor Multiple Cross-Site Scripting Vulnerabilities (Windows)

This host is installed with Ecava IntegraXor and is prone to cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbecavaintegraxormultxssvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Ecava IntegraXor Multiple Cross-Site Scripting Vulnerabilities Windows Authors: Rachana Shetty...

CVE-2011-2958

Multiple cross-site scripting XSS vulnerabilities in Ecava IntegraXor before 3.60 Build 4080 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2958

Multiple cross-site scripting XSS vulnerabilities in Ecava IntegraXor before 3.60 Build 4080 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ecava IntegraXor before 3.60 Build 4080 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2958

Multiple cross-site scripting XSS vulnerabilities in Ecava IntegraXor before 3.60 Build 4080 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2958

CVE-2011-2958 affects Ecava IntegraXor prior to 3.60 (Build 4080). Vulnerability: multiple XSS flaws allowing remote injection of arbitrary script/HTML via unspecified vectors. Exploitation details are not provided in the sources; the advisories reference a patched version 3.60.4080 (or later) as...

PT-2011-4208

Name of the Vulnerable Software and Affected Versions Ecava IntegraXor versions prior to 3.60 Build 4080 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to multiple cross-site scripting XSS vulnerabilities. Recommendatio...

CVE-2011-2958: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Ecava IntegraXor before 3.60 Build 4080 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Ecava IntegraXor Path Subversion Arbitrary DLL Injection Code Execution

Binary data scadaintegraxor3604081.nbin...

Ecava IntegraXor < 3.60.4080 XSS

Binary data scadaintegraxor3604080.nbin...

Ecava IntegraXor Detection

Binary data scadaappecavaintegraxordetect.nbin...

Ecava IntegraXor < 3.60.4050 Unspecified SQL Injection

Binary data scadaintegraxor3604050.nbin...

CVE-2011-1562

Ecava IntegraXor HMI before n 3.60 Build 4032 allows remote attackers to bypass authentication and execute arbitrary SQL statements via unspecified vectors related to a crafted POST request. NOTE: some sources have reported this issue as SQL injection, but this might not be accurate...

Sql injection

Ecava IntegraXor HMI before n 3.60 Build 4032 allows remote attackers to bypass authentication and execute arbitrary SQL statements via unspecified vectors related to a crafted POST request. NOTE: some sources have reported this issue as SQL injection, but this might not be accurate...

CVE-2011-1562

Ecava IntegraXor HMI prior to version 3.60 (Build 4032) is vulnerable to an unauthenticated SQL statement execution via a crafted HTTP POST request. The vulnerability could lead to data leakage, data manipulation, and remote code execution on the backend database service. Ecava has released a pat...

CVE-2011-1562

Ecava IntegraXor HMI before n 3.60 Build 4032 allows remote attackers to bypass authentication and execute arbitrary SQL statements via unspecified vectors related to a crafted POST request. NOTE: some sources have reported this issue as SQL injection, but this might not be accurate...

CVE-2011-1562: Improper Neutralization of Special Elements used in an SQL Command

Ecava IntegraXor HMI before n 3.60 Build 4032 allows remote attackers to bypass authentication and execute arbitrary SQL statements via unspecified vectors related to a crafted POST request. NOTE: some sources have reported this issue as SQL injection, but this might not be accurate...