Filtered by vendor Batavi Subscriptions
Filtered by product Batavi Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2013-2289 1 Batavi 1 Batavi 2024-11-21 N/A
Cross-site scripting (XSS) vulnerability in admin/templates/default.php in Batavi 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to admin/index.php.
CVE-2012-0069 1 Batavi 1 Batavi 2024-11-21 N/A
SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter.
CVE-2011-0525 1 Batavi 1 Batavi 2024-11-21 8.8 High
Batavi before 1.0 has CSRF.