CVE-2011-1562 Ecava IntegraXor HMI before n 3.60 (Build 4032) allows remote attackers to bypass authentication and execute arbitrary SQL statements via unspecified vectors related to a crafted POST request. NOTE: s...
HighCVSS 7.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ecava IntegraXor HMI before n 3.60 (Build 4032) allows remote attackers to bypass authentication and execute arbitrary SQL statements via unspecified vectors related to a crafted POST request. NOTE: some sources have reported this issue as SQL injection, but this might not be accurate.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ecava integraxor | <= 3.60 | No fix listed |
References
- 44105 third-party-advisory
- twitter.com
- www.integraxor.com
- www.integraxor.com patch vendor-advisory
- 47019 vdb-entry
- www.us-cert.gov patch us-government-resource
- ADV-2011-0761 vdb-entry vendor-advisory
- integraxor-unspecified-sql-injection(66306) vdb-entry