Battleaxe Software

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Battleaxe Software records in CISA KEV

No Battleaxe Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bttlxeforum 3 records LOW

Records

3 records

TI-2003-00199 CVE-2003-0215 · GHSA-r7qx-6g8x-6jwf

SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers…

LOW 35

SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via the (1) username and (2) password fields, and possibly other fields.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01246 Published 2003-04-26 No fix listed

TI-2005-01481 CVE-2005-1570 · GHSA-7q8m-969g-prjp

forum.asp in bttlxeForum 2.0 allows remote attackers to obtain full path information via…

LOW 25

forum.asp in bttlxeForum 2.0 allows remote attackers to obtain full path information via a certain hex-encoded argument to the page parameter, possibly due to a SQL injection vulnerability.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01178 Published 2005-05-14 No fix listed

TI-2006-00945 CVE-2006-0974 · GHSA-2jmr-h5mm-35ff

Cross-site scripting (XSS) vulnerability in failure.asp in Battleaxe bttlxeForum 2.0…

LOW 24

Cross-site scripting (XSS) vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject arbitrary web script or HTML via the err_txt parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01911 Published 2006-03-03 No fix listed

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0