Batavi

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-2289 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in admin/templates/default.php in Batavi 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to admin/index.php. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS PHP Batavi

NVD Exploit-DB VulDB

CVSS 2.0

4.3

EPSS

0.9%

CVE-2012-0069 HIGH This Week

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Batavi

NVD

CVSS 2.0

7.5

EPSS

0.7%

CVE-2013-2289

EPSS 1% CVSS 4.3

MEDIUM POC This Month

XSS PHP Batavi

NVD Exploit-DB VulDB

CVE-2012-0069

EPSS 1% CVSS 7.5

HIGH This Week

PHP SQLi Batavi

NVD