Sql injection

2012-01-2418:55:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.7%

JSON

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter.

CPENameOperatorVersion
batavieq1.1.4
batavieq1.1.1
batavieq1.0.2
batavieq1.0.1
batavieq1.0.5
batavieq1.0.4
batavieq1.0.3
batavieq1.0.6
batavieq1.1.2
batavieq1.0

Name	Operator	Version
batavi	eq	1.1.4
batavi	eq	1.1.1
batavi	eq	1.0.2
batavi	eq	1.0.1
batavi	eq	1.0.5
batavi	eq	1.0.4
batavi	eq	1.0.3
batavi	eq	1.0.6
batavi	eq	1.1.2
batavi	eq	1.0

Rows per page:

1-10 of 111

References

osvdb.org/78362

secunia.com/advisories/47582

voxel.dl.sourceforge.net/project/batavi/README.txt

www.openwall.com/lists/oss-security/2012/01/18/9

www.openwall.com/lists/oss-security/2012/01/20/6

www.securityfocus.com/bid/51547

exchange.xforce.ibmcloud.com/vulnerabilities/72449