Vulnerabilities (CVE)

Filtered by vendor Batavi Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-0525 1 Batavi 1 Batavi 2024-02-04 6.8 MEDIUM 8.8 HIGH
Batavi before 1.0 has CSRF.
CVE-2013-2289 1 Batavi 1 Batavi 2024-02-04 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in admin/templates/default.php in Batavi 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to admin/index.php.
CVE-2012-0069 1 Batavi 1 Batavi 2024-02-04 7.5 HIGH N/A
SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter.