Search vulnerabilities

Results 3

Export CSV
CVE-2013-2289

Cross-site scripting (XSS) vulnerability in admin/templates/default.php in Batavi 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to admin/index.php.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Products
CVE-2012-0069

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter.

CVSS 2.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products