EUVD-2012-0107

Malware in sbrugna...

EUVD-2013-2235

Malware in sbrugna...

EUVD-2011-0545

Malware in sbrugna...

CVE-2011-0525

Batavi before 1.0 has CSRF...

CVE-2011-0525

Batavi before 1.0 has CSRF...

Cross site request forgery (csrf)

Batavi before 1.0 has CSRF...

CVE-2011-0525

Technical details about CVE-2011-0525 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and security feeds.

CVE-2011-0525

Batavi before 1.0 has CSRF...

CVE-2013-2289

Cross-site scripting XSS vulnerability in admin/templates/default.php in Batavi 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to admin/index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/templates/default.php in Batavi 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to admin/index.php...

CVE-2013-2289

CVE-2013-2289 describes a Cross-site Scripting (XSS) vulnerability in Batavi 1.2.2, specifically in admin/templates/default.php, exploitable by sending crafted data via the QUERY_STRING to admin/index.php. Affected component/file: Batavi 1.2.2’s admin templates; root cause is unsanitized QUERY_ST...

CVE-2013-2289

Cross-site scripting XSS vulnerability in admin/templates/default.php in Batavi 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to admin/index.php...

Batavi - index.php Cross-Site Scripting

Batavi - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/58151/info Batavi is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Batavi - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/58151/info Batavi is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

SQL Injection Vulnerability in Batavi 1.1.2

Information -------------------- Name : SQL Injection Vulnerability in Batavi Software : Batavi 1.1.2 and possibly below. Vendor Homepage : http://www.batavi.org Vulnerability Type : SQL Injection Severity : Critical Researcher : Onur Y?lmaz Advisory Reference : NS-12-003 Description...

Batavi 1.1.2 SQL Injection

Information -------------------- Name : SQL Injection Vulnerability in Batavi Software : Batavi 1.1.2 and possibly below. Vendor Homepage : http://www.batavi.org Vulnerability Type : SQL Injection Severity : Critical Researcher : Onur Yılmaz Advisory Reference : NS-12-003 Description...

CVE-2012-0069

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter...

Sql injection

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter...

CVE-2012-0069

CVE-2012-0069 describes an SQL injection in Batavi’s web component. Affected: Batavi before 1.2.1, via ajax.php and the boxToReload parameter, enabling remote command execution. Exploit details are not provided in the supplied documents. Impact and remediation: the vulnerability allows arbitrary ...

CVE-2012-0069

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter...