Ecava IntegraXor Project Directory Information Disclosure Vulnerability
BID:64351
Info
Ecava IntegraXor Project Directory Information Disclosure Vulnerability
| Bugtraq ID: | 64351 |
| Class: | Design Error |
| CVE: |
CVE-2014-0752 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 15 2013 12:00AM |
| Updated: | Jan 09 2014 01:21PM |
| Credit: | Alphazorx aka technically.screwed |
| Vulnerable: |
Ecava IntegraXor 3.71.4200 Ecava IntegraXor 3.60.4050 Ecava IntegraXor 3.60.4032 Ecava IntegraXor 3.60 Ecava IntegraXor 3.6.4000.5 Ecava IntegraXor 3.6.4000.0 Ecava IntegraXor 3.5.4000.5 Ecava IntegraXor 3.5.3900.5 Ecava IntegraXor 3.5.3900.10 Ecava IntegraXor 3.5 |
| Not Vulnerable: | |
Discussion
Ecava IntegraXor Project Directory Information Disclosure Vulnerability
Ecava IntegraXor is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may lead to further attacks such as arbitrary code execution attack.
Versions prior to IntegraXor 4.1.4369 are vulnerable.
Ecava IntegraXor is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may lead to further attacks such as arbitrary code execution attack.
Versions prior to IntegraXor 4.1.4369 are vulnerable.
Exploit / POC
Ecava IntegraXor Project Directory Information Disclosure Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
Ecava IntegraXor Project Directory Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Ecava IntegraXor Project Directory Information Disclosure Vulnerability
References:
References:
- IntegraXor Homepage (Ecava )