Vulnerabilities

TI-2011-00452 CVE-2011-0525 · GHSA-7fw9-mvm3-f26m

Batavi before 1.0 has CSRF.

LOW 39

Batavi before 1.0 has CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00514 Published 2020-02-05 Fixed in 1.0 CWE-352

TI-2013-02040 CVE-2013-2289 · GHSA-pww4-5pjw-3mw6

Cross-site scripting (XSS) vulnerability in admin/templates/default.php in Batavi 1.2.2…

LOW 24

Cross-site scripting (XSS) vulnerability in admin/templates/default.php in Batavi 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to admin/index.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01746 Published 2014-03-11 No fix listed CWE-79

TI-2012-00068 CVE-2012-0069 · GHSA-ff95-jg49-vwrr

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to…

LOW 36

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0133 Published 2012-01-24 No fix listed CWE-89

Vulnerabilities

Filters

Batavi before 1.0 has CSRF.

Cross-site scripting (XSS) vulnerability in admin/templates/default.php in Batavi 1.2.2…

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to…