4 matches found
CVE-2009-2125
deletebug.php in Elvin before 1.2.1 does not require administrative privileges, which allows remote authenticated users to bypass intended access restrictions and delete arbitrary bugs...
4CVSS5.7AI score0.00985EPSS
SaveExploits0References4
CVE-2009-2125
deletebug.php in Elvin before 1.2.1 does not require administrative privileges, which allows remote authenticated users to bypass intended access restrictions and delete arbitrary bugs...
4CVSS6.4AI score0.00985EPSS
SaveExploits0References3
CVE-2009-2125
CVE-2009-2125 affects Elvin before 1.2.1, where delete_bug.php does not require administrative privileges. This allows remote authenticated users to bypass access restrictions and delete arbitrary bugs. The vulnerability is tied to the affected product/version and the root cause is missing author...
4CVSS6.6AI score0.00985EPSS
SaveExploits0References3Affected Software1
20