ecava integraxor 3.6.4000.0 vulnerabilities and exploits

(subscribe to this query)

9.3

CVSSv2

Directory traversal vulnerability in an unspecified ActiveX control in Ecava IntegraXor prior to 3.71.4200 allows remote malicious users to execute arbitrary code via vectors involving an HTML document on the server.

Ecava Integraxor 3.60 Ecava Integraxor 3.6.4000.0 Ecava Integraxor Ecava Integraxor 3.5.3900.5 Ecava Integraxor 3.5.3900.10

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in Ecava IntegraXor prior to 3.60 (Build 4080) allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Ecava Integraxor Ecava Integraxor 3.5.3900.10 Ecava Integraxor 3.60 Ecava Integraxor 3.5.3900.5 Ecava Integraxor 3.6.4000.0

5

CVSSv2

The SCADA server in Ecava IntegraXor prior to 4.1.4369 allows remote malicious users to read arbitrary project backup files via a crafted URL.

Ecava Integraxor 3.71.4200 Ecava Integraxor 3.71 Ecava Integraxor 3.60.4061 Ecava Integraxor 3.6.4000.0 Ecava Integraxor 3.5.3900.5 Ecava Integraxor Ecava Integraxor 4.00 Ecava Integraxor 3.5.3900.10 Ecava Integraxor 4.1 Ecava Integraxor 3.72

6.9

CVSSv2

Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party info...

Ecava Integraxor 3.6.4000.0

7.8

CVSSv2

Stack-based buffer overflow in the SCADA server in Ecava IntegraXor prior to 4.1.4390 allows remote malicious users to cause a denial of service (system crash) by triggering access to DLL code located in the IntegraXor directory.

Ecava Integraxor 3.71 Ecava Integraxor 3.72 Ecava Integraxor 4.00 Ecava Integraxor 4.1 Ecava Integraxor 4.1.4360 Ecava Integraxor 4.1.4369 Ecava Integraxor Ecava Integraxor 3.5.3900.10 Ecava Integraxor 3.5.3900.5 Ecava Integraxor 3.6.4000.0 Ecava Integraxor 3.60.4061 Ecava Integraxor 3.71.4200

5

CVSSv2

Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and previous versions allows remote malicious users to read arbitrary files via a .. (dot dot) in the file_name parameter in an open request.

Ecava Integraxor 3.5.3900.10 Ecava Integraxor Ecava Integraxor 3.5.3900.5

1 EDB exploit

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook