CVE-2017-16735

<= 6.1.1030.1

A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL Injection vulnerability has been identifi

5.3MEDIUM

CVE-2017-16733

<= 6.1.1030.1

A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL Injection vulnerability has been identifi

5.3MEDIUM

CVE-2017-6050

<= 5.2.1231.0

A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate

9.8CRITICAL

CVE-2016-8341

all versions

An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server has parameters that are vulnerable

9.8CRITICAL

CVE-2016-2306

<= 4.2.4502

The HMI web server in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive cleartext information by

7.5HIGH

CVE-2016-2305

<= 4.2.4502

Cross-site scripting (XSS) vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary web

6.1MEDIUM

CVE-2016-2304

<= 4.2.4502

Ecava IntegraXor before 5.0 build 4522 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which mak

4.3MEDIUM

CVE-2016-2303

<= 4.2.4502

CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers an

5.3MEDIUM

CVE-2016-2302

<= 4.2.4502

Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive information by reading detailed error messages.

5.3MEDIUM

CVE-2016-2301

<= 4.2.4502

SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbitrary SQL c

6.3MEDIUM

CVE-2016-2300

<= 4.2.4502

Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web pages via unkno

6.5MEDIUM

CVE-2016-2299

<= 4.2.4502

SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL commands vi

7.3HIGH

CVE-2015-0990

<= 4.1.4450

Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a r

CVE-2014-2377

<= 4.1.4360

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to discover full p

CVE-2014-2376

<= 4.1.4360

SQL injection vulnerability in Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remo

CVE-2014-2375

<= 4.1.4360

Ecava IntegraXor SCADA Server Stable 4.1.4360 and earlier and Beta 4.1.4392 and earlier allows remote attackers to read or write t

CVE-2014-0786

<= 4.1.4390

Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT stat

CVE-2014-0753

<= 4.1.4380

Stack-based buffer overflow in the SCADA server in Ecava IntegraXor before 4.1.4390 allows remote attackers to cause a denial of s

CVE-2014-0752

<= 4.1.4360

The SCADA server in Ecava IntegraXor before 4.1.4369 allows remote attackers to read arbitrary project backup files via a crafted

CVE-2012-4700

<= 4.00

Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlier allow rem

CVE-2012-0246

<= 3.60.4061

Directory traversal vulnerability in an unspecified ActiveX control in Ecava IntegraXor before 3.71.4200 allows remote attackers t

CVE-2011-2958

<= 3.60.4061

Multiple cross-site scripting (XSS) vulnerabilities in Ecava IntegraXor before 3.60 (Build 4080) allow remote attackers to inject

CVE-2011-1562

<= 3.60

Ecava IntegraXor HMI before n 3.60 (Build 4032) allows remote attackers to bypass authentication and execute arbitrary SQL stateme

CVE-2010-4599

all versions

Untrusted search path vulnerability in Ecava IntegraXor 3.6.4000.0 allows local users to gain privileges via a Trojan horse dwmapi

CVE-2010-4598

<= 3.6.4000.0

Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a

CVE-2010-4597

<= 3.5.3900.5

Stack-based buffer overflow in the save method in the IntegraXor.Project ActiveX control in igcomm.dll in Ecava IntegraXor Human-M