Cleartext Credential Exposure in Ecava IntegraXor before 4.1.4393

CVE-2014-0786 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role.

Learn more about our Web Application Penetration Testing UK.