EUVD-2009-2124

Malware in sbrugna...

CVE-2009-2128

SQL injection vulnerability in closebug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the title aka subject field...

CVE-2009-2126

Cross-site scripting XSS vulnerability in closebug.php in Elvin before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the title aka subject field...

CVE-2009-2128

The CVE-2009-2128 entry concerns Elvin before 1.2.1, where a SQL injection in close_bug.php (via the title/subject parameter) allows remote attackers to run arbitrary SQL commands. Affected software is Elvin; vulnerable component is close_bug.php handling the title field. The impact is remote cod...

CVE-2009-2126: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in closebug.php in Elvin before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the title aka subject field...

CVE-2009-2128: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in closebug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the title aka subject field...