CVE-2009-2127

Cross-site scripting XSS vulnerability in showactivity.php in Elvin 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2009-2128

SQL injection vulnerability in closebug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the title aka subject field...

CVE-2009-2123

CVE-2009-2123 describes multiple SQL injection vulnerabilities in Elvin 1.2.0 allowing remote attackers to execute arbitrary SQL commands via (1) inUser (Username) and (2) inPass (Password) parameters to inc/login.ei (reachable through login.php); and (3) id parameter to show_bug.php and show_act...

CVE-2009-2130

Elvin 1.2.0 is affected by CVE-2009-2130, where remote attackers can read PHP source files (inc/login.ei, inc/jump_bug.ei, inc/create_account.ei) via direct requests. The underlying issue is a file disclosure vulnerability in Elvin 1.2.0 leading to partial confidentiality impact. Public reference...

CVE-2009-2126

Cross-site scripting XSS vulnerability in closebug.php in Elvin before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the title aka subject field...

CVE-2009-2129

Cross-site request forgery CSRF vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authentication of arbitrary users via a logout action...

CVE-2009-2128

The CVE-2009-2128 entry concerns Elvin before 1.2.1, where a SQL injection in close_bug.php (via the title/subject parameter) allows remote attackers to run arbitrary SQL commands. Affected software is Elvin; vulnerable component is close_bug.php handling the title field. The impact is remote cod...

CVE-2009-2127

CVE-2009-2127 is a cross‑site scripting (XSS) vulnerability in Elvin 1.2.0 , specifically in the file show_activity.php . The flaw allows remote attackers to inject arbitrary web script or HTML via the id parameter. The referenced CVSSv2 base score is 4.3 (Medium) with network access, user intera...

CVE-2009-2125

CVE-2009-2125 affects Elvin before 1.2.1, where delete_bug.php does not require administrative privileges. This allows remote authenticated users to bypass access restrictions and delete arbitrary bugs. The vulnerability is tied to the affected product/version and the root cause is missing author...

CVE-2009-2125

deletebug.php in Elvin before 1.2.1 does not require administrative privileges, which allows remote authenticated users to bypass intended access restrictions and delete arbitrary bugs...

CVE-2009-2124

Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter...

CVE-2009-2123

Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary SQL commands via the 1 inUser aka Username and 2 inPass aka Password parameters to a inc/login.ei, reachable through login.php; and the 3 id parameter to b showbug.php and c showactivity.php. NOTE: i...

CVE-2009-2126

CVE-2009-2126 affects Elvin before 1.2.1. The vulnerability is a cross-site scripting (XSS) flaw in close_bug.php, where an attacker can inject arbitrary web script or HTML via the title (subject) field. This is documented across multiple sources (NVD, Red Hat, CVE List, Prion, etc.). The availab...

CVE-2009-2124

Elvin 1.2.0 is affected by a directory traversal vulnerability in page.php that allows remote attackers to include and execute arbitrary local files via a .. in the id parameter. Impact details: CVSSv2 base score 7.5 (HIGH) with NETWORK attack vector, LOW complexity, NONE authentication, and PART...

CVE-2009-2129

CVE-2009-2129 describes a cross-site request forgery (CSRF) vulnerability in the Elvin 1.2.0 login.php that allows a remote attacker to hijack the authentication of arbitrary users via a logout action. The vulnerability is documented across multiple sources (NVD entry and CVE records) with the sa...

CVE-2009-2130

Elvin 1.2.0 allows remote attackers to read the PHP source code of 1 login.ei, 2 jumpbug.ei, or 3 createaccount.ei in inc/ via a direct request...

elvin bts 1.2.0 - Multiple Vulnerabilities

elvin bts 1.2.0 - Multiple Vulnerabilities + Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod + www.mortal-team.org - Script Homepage : http://www.elvinbts.org/ - Google Dork : Powered by Elvin Bug Tracking Server. Elvin BTS suffers from a lot of vunerabilities 1 SQL Injecti...

Elvin BTS 1.2.0 Multiple Remote Vulnerabilities

No description provided by source. + Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod + www.mortal-team.org - Script Homepage : http://www.elvinbts.org/ - Google Dork : Powered by Elvin Bug Tracking Server. Elvin BTS suffers from a lot of vunerabilities 1 SQL Injection 2 Loc...

Elvin BTS 1.2.0 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================== Elvin BTS 1.2.0 Multiple Remote Vulnerabilities =============================================== + Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod - Script Homepage :...

elvin bts 1.2.0 - Multiple Vulnerabilities

Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod + www.mortal-team.org - Script Homepage : http://www.elvinbts.org/ - Google Dork : Powered by Elvin Bug Tracking Server. Elvin BTS suffers from a lot of vunerabilities 1 SQL Injection 2 Local File Inclusion 3 SQL Injection...