jetlib.sec » Bugtraq » SQL Injection Vulnerability in Batavi 1.1.2

Feeds

132968 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Bugtraq

• February 07, 2012
• 

  SQL Injection Vulnerability in Batavi 1.1.2

  Posted: February 7th, 2012, 8:21am PST

  Tags:   

  Posted by Netsparker Advisories on Feb 07

  Information
  --------------------
  Name :  SQL Injection Vulnerability in Batavi
  Software :  Batavi 1.1.2 and possibly below.
  Vendor Homepage :  http://www.batavi.org
  Vulnerability Type :  SQL Injection
  Severity :  Critical
  Researcher :  Onur Yılmaz
  Advisory Reference :  NS-12-003
  
  Description
  --------------------
  Batavi is an open source e-commerce platform.
  
  Details
  --------------------
  Batavi is affected by a SQL Injection vulnerability...