Skip to content
OpenAdvisories
High ICSA-16-105-03 8 CVEs

Ecava IntegraXor Vulnerabilities

Published Jan 16, 2016 · Updated Jun 5, 2025 · Revision 2

Vendor: Ecava Product: IntegraXor

Vulnerabilities 8

  • Unscored —
    CVE-2016-2299

    SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2016-2300

    Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web page…

  • Unscored —
    CVE-2016-2301

    SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbi…

  • Unscored —
    CVE-2016-2302

    Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive information by reading detailed erro…

  • Unscored —
    CVE-2016-2303

    CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP…

  • Unscored —
    CVE-2016-2304

    Ecava IntegraXor before 5.0 build 4522 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie…

  • Unscored —
    CVE-2016-2305

    Cross-site scripting (XSS) vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject ar…

  • Unscored —
    CVE-2016-2306

    The HMI web server in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive cleartext info…

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References