SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2012-0069

SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload parameter.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.5
Exploit Score: 10.0
Impact Score: 6.4

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Reference:

SECUNIA-47582

BID-51547

OSVDB-78362

http://www.openwall.com/lists/oss-security/2012/01/18/9

http://www.openwall.com/lists/oss-security/2012/01/20/6

batavi-ajax-sql-injection(72449)

http://voxel.dl.sourceforge.net/project/batavi/README.txt


30430



423868



247862



909



194603



282