EUVD-2009-2124

Malware in sbrugna...

CVE-2009-2128

SQL injection vulnerability in closebug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the title aka subject field...

CVE-2009-2128

The CVE-2009-2128 entry concerns Elvin before 1.2.1, where a SQL injection in close_bug.php (via the title/subject parameter) allows remote attackers to run arbitrary SQL commands. Affected software is Elvin; vulnerable component is close_bug.php handling the title field. The impact is remote cod...

CVE-2009-2126

Cross-site scripting XSS vulnerability in closebug.php in Elvin before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the title aka subject field...