Skip to content
OpenAdvisories

Archive

15 September 2014

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.3

    Ecava IntegraXor SCADA Server External Control of File Name or Path

    Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write to arbitrary files, and obtain sensitive information or cause a denial of service (disk consumption), via the CSV export feature.

  • High 7.5

    Ecava IntegraXor SCADA Server SQL Injection

    SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.