Ecava IntegraXor < 3.60.4050 Unspecified SQL Injection
Critical Nessus Plugin ID 53549
SynopsisThe remote Windows host contains a SCADA application that is susceptible to a SQL injection attack.
DescriptionThe version of IntegraXor installed on the remote host is earlier than 3.60 (Build 4050). As such, it reportedly contains an unspecified SQL injection vulnerability that can be exploited by an unauthenticated remote attacker and lead to data leakage, data manipulation, and remote code execution against the backend host running the database service.
SolutionUpgrade to version 3.60.4050.0 or later.