{"id":"CVE-2016-8341","aliases":["EUVD-2016-9189","GHSA-gfgq-2r7j-vp6q"],"status":"published","title":"An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server...","description":"An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server has parameters that are vulnerable to SQL injection. If the queries are not sanitized, the host's database could be subject to read, write, and delete commands.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01659,"percentile":0.76784,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2017-02-13T21:00:00Z","modified":"2026-06-17T00:54:11Z","products":[{"vendor":"ecava","product":"integraxor"}],"references":[{"url":"http://www.securityfocus.com/bid/95907","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-031-02","tags":["x_refsource_MISC","x_transferred","Mitigation","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8341"},{"url":"https://github.com/advisories/GHSA-gfgq-2r7j-vp6q"}],"sources":{"cve":[{"id":"CVE-2016-8341","description":"An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server has parameters that are vulnerable to SQL injection. If the queries are not sanitized, the host's database could be subject to read, write, and delete commands.","status":"published","published":"2017-02-13T21:00:00Z","modified":"2024-08-06T02:20:30.621Z","updated_at":"2026-11-02T14:33:32.724067Z"}],"euvd":[{"id":"EUVD-2016-9189","description":"An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server has parameters that are vulnerable to SQL injection. If the queries are not sanitized, the host's database could be subject to read, write, and delete commands.","status":"published","published":"2017-02-13T21:00:00Z","modified":"2024-08-06T02:20:30Z","updated_at":"2026-11-03T02:22:30.514382Z"}],"ghsa":[{"id":"GHSA-gfgq-2r7j-vp6q","title":"An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server...","description":"An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server has parameters that are vulnerable to SQL injection. If the queries are not sanitized, the host's database could be subject to read, write, and delete commands.","status":"published","published":"2022-05-17T02:57:26Z","modified":"2023-01-27T05:06:17Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:42:52.881185Z"}],"nvd":[{"id":"CVE-2016-8341","description":"An issue was discovered in Ecava IntegraXor Version 5.0.413.0. The Ecava IntegraXor web server has parameters that are vulnerable to SQL injection. If the queries are not sanitized, the host's database could be subject to read, write, and delete commands.","status":"published","published":"2017-02-13T21:59:00.597Z","modified":"2026-06-17T00:54:11.49Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:03:35.822579Z"}]}}