EUVD-2009-2908

Malware in sbrugna...

CVE-2009-2920

Multiple cross-site scripting XSS vulnerabilities in Elvin 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 component and 2 priority parameters to buglist.php; and the 3 Username 4 E-mail, 5 Pass, and 6 Confirm pass fields to createaccount.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Elvin 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 component and 2 priority parameters to buglist.php; and the 3 Username 4 E-mail, 5 Pass, and 6 Confirm pass fields to createaccount.php...

CVE-2009-2920

CVE-2009-2920 affects Elvin 1.2.2 with multiple Cross-Site Scripting (XSS) flaws. The vulnerabilities allow remote attackers to inject arbitrary scripts via parameters to buglist.php (component, priority) and to createaccount.php (Username, E-mail, Pass, Confirm pass). Attack vector is network-ba...