{"id":"CVE-2016-8341","state":"PUBLISHED","title":"An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server has parameters that are vulnerable to SQL injection. If the queries are not sanitized","description":"An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server has parameters that are vulnerable to SQL injection. If the queries are not sanitized, the host's database could be subject to read, write, and delete commands.","publishedAt":"2017-02-13T21:00:00.000Z","updatedAt":"2024-08-06T02:20:30.621Z","severity":null,"assigner":"icscert","products":["n/a Ecava IntegraXor 5.0.413.0"],"affected":[{"vendor":"n/a","product":"Ecava IntegraXor 5.0.413.0","versions":[{"version":"Ecava IntegraXor 5.0.413.0","status":"affected"}]}],"references":["http://www.securityfocus.com/bid/95907","https://ics-cert.us-cert.gov/advisories/ICSA-17-031-02"],"weaknesses":[],"ingestedAt":"2026-10-29T19:42:55.629Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2016/8xxx/CVE-2016-8341.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2016-8341","state":"PUBLISHED","datePublished":"2017-02-13T21:00:00.000Z","dateUpdated":"2024-08-06T02:20:30.621Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2016-09-28T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server has parameters that are vulnerable to SQL injection. If the queries are not sanitized, the host's database could be subject to read, write, and delete commands."}],"affected":[{"vendor":"n/a","product":"Ecava IntegraXor 5.0.413.0","versions":[{"version":"Ecava IntegraXor 5.0.413.0","status":"affected"}]}],"references":[{"url":"http://www.securityfocus.com/bid/95907","name":"95907","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-031-02","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Ecava IntegraXor SQL injection","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"icscert","dateUpdated":"2017-02-14T10:57:01.000Z","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6"},"datePublic":"2017-02-13T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"ics-cert@hq.dhs.gov","ID":"CVE-2016-8341","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Ecava IntegraXor 5.0.413.0","version":{"version_data":[{"version_value":"Ecava IntegraXor 5.0.413.0"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server has parameters that are vulnerable to SQL injection. If the queries are not sanitized, the host's database could be subject to read, write, and delete commands."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Ecava IntegraXor SQL injection"}]}]},"references":{"reference_data":[{"name":"95907","refsource":"BID","url":"http://www.securityfocus.com/bid/95907"},{"name":"https://ics-cert.us-cert.gov/advisories/ICSA-17-031-02","refsource":"MISC","url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-031-02"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.securityfocus.com/bid/95907","name":"95907","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-031-02","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-06T02:20:30.621Z"}}]}}}