Batavi

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Batavi records in CISA KEV

No Batavi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Batavi 3 records LOW

Records

3 records in Batavi · all components

TI-2011-00452 CVE-2011-0525 · GHSA-7fw9-mvm3-f26m

Batavi before 1.0 has CSRF.

LOW 39

Batavi before 1.0 has CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00514 Published 2020-02-05 Fixed in 1.0 CWE-352

TI-2012-00068 CVE-2012-0069 · GHSA-ff95-jg49-vwrr

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to…

LOW 36

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0133 Published 2012-01-24 No fix listed CWE-89

TI-2013-02040 CVE-2013-2289 · GHSA-pww4-5pjw-3mw6

Cross-site scripting (XSS) vulnerability in admin/templates/default.php in Batavi 1.2.2…

LOW 24

Cross-site scripting (XSS) vulnerability in admin/templates/default.php in Batavi 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to admin/index.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01746 Published 2014-03-11 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0