high7.5
CVE-2012-0069
SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter.
Impact
SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Batavi | Batavi | through 1.2 Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/78362
- http://secunia.com/advisories/47582
- http://voxel.dl.sourceforge.net/project/batavi/README.txt
- http://www.openwall.com/lists/oss-security/2012/01/18/9
- http://www.openwall.com/lists/oss-security/2012/01/20/6
- http://www.securityfocus.com/bid/51547
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72449
- http://osvdb.org/78362
- http://secunia.com/advisories/47582
- http://voxel.dl.sourceforge.net/project/batavi/README.txt
- http://www.openwall.com/lists/oss-security/2012/01/18/9
- http://www.openwall.com/lists/oss-security/2012/01/20/6
- http://www.securityfocus.com/bid/51547
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72449