CVE-2016-2299
published 2016-04-22CVE-2016-2299: SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
PriorityP346high7.3CVSS 3.0
AVNACLPRNUINSUCLILAL
EPSS
1.43%
69.6th percentile
SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ecava | integraxor | <= 4.2.4502 | — |
CVSS provenance
nvdv3.07.3HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Ecava IntegraXor Vulnerabilities
cisa_ics·2018-08-23
Ecava IntegraXor Vulnerabilities
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Ecava IntegraXor Vulnerabilities
Last RevisedAugust 23, 2018
Alert CodeICSA-16-105-03
## OVERVIEW
Independent security researcher Marcus Richerson and Steven Seeley of Source Incite, working with Trend Micro’s Zero Day Initiative, independently identified vulnerabilities in Ecava’s IntegraXor application. Ecava has produced a new version to mitigate these vulnerabilities. Marcus Richerson has tested the new version to validate that it resolves all the vulnerabilities, except for one incomplete fix, which Ecava plans to fully address in an upcoming release.
These vulnerabilities
GHSA
GHSA-pfg8-6q4f-q7x7: SQL injection vulnerability in Ecava IntegraXor before 5
ghsa_unreviewed·2022-05-17
CVE-2016-2299 [HIGH] CWE-89 GHSA-pfg8-6q4f-q7x7: SQL injection vulnerability in Ecava IntegraXor before 5
SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.zerodayinitiative.com/advisories/ZDI-16-236http://www.zerodayinitiative.com/advisories/ZDI-16-237http://www.zerodayinitiative.com/advisories/ZDI-16-238http://www.zerodayinitiative.com/advisories/ZDI-16-239http://www.zerodayinitiative.com/advisories/ZDI-16-240https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03http://www.zerodayinitiative.com/advisories/ZDI-16-236http://www.zerodayinitiative.com/advisories/ZDI-16-237http://www.zerodayinitiative.com/advisories/ZDI-16-238http://www.zerodayinitiative.com/advisories/ZDI-16-239http://www.zerodayinitiative.com/advisories/ZDI-16-240https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03
2016-04-22
Published