CVE-2017-6050: A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior
CVE-2017-6050 is a critical-severity flaw (CVSS 9.8) affecting integraxor. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input, which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of SQL queries.
Why this priority
- Critical severity
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 9.8 (Critical) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 3.5% (top 11%) |
| CISA exploited list | No |
| Weakness | CWE-89 |
| Published | 2017-06-21 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2017-6050?
integraxor: upgrade to newer than 5.2.1231.0. Exact commands for each OS are on this page.
Is CVE-2017-6050 being exploited?
CVE-2017-6050 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2017-6050 affect?
CVE-2017-6050 affects integraxor. Severity is critical (CVSS 9.8). A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input, which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of
How urgent is CVE-2017-6050?
Priority 62/100. Critical severity; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2017-16735 MEDIUM 5.3 UPGRADE A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior
- CVE-2017-16733 MEDIUM 5.3 UPGRADE A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior
- CVE-2016-8341 CRITICAL 9.8 DOWNGRADE An issue was discovered in Ecava IntegraXor Version 5.0.413.0