VYPR

Batavi

by Batavi

CVEs (3)

  • CVE-2013-2289Mar 11, 2014
    risk 0.03cvss epss 0.02

    Cross-site scripting (XSS) vulnerability in admin/templates/default.php in Batavi 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to admin/index.php.

  • CVE-2011-0525Feb 5, 2020
    risk 0.00cvss epss 0.01

    Batavi before 1.0 has CSRF.

  • CVE-2012-0069Jan 24, 2012
    risk 0.00cvss epss 0.01

    SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter.