Login Request a demo
EL
Product
Elvinbts
by Elvinbts · last CVE Aug 21, 2009
9
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities9Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Elvinbts to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2009-2920
–
1%
Aug 21
Multiple cross-site scripting (XSS) vulnerabilities in Elvin 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) component and (2) priority parameters…
Affected: 1.2.2
CVE-2009-2130
–
2%
Jun 19
Elvin 1.2.0 allows remote attackers to read the PHP source code of (1) login.ei, (2) jump_bug.ei, or (3) create_account.ei in inc/ via a direct request
Affected: 1.2.0
CVE-2009-2129
–
1%
Jun 19
Cross-site request forgery (CSRF) vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authentication of arbitrary users via a logout action
Affected: 1.2.0
CVE-2009-2128
–
1%
Jun 19
SQL injection vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the title (aka subject) field
Affected: through 1.2.0; 1.1.0
CVE-2009-2127
–
1%
Jun 19
Cross-site scripting (XSS) vulnerability in show_activity.php in Elvin 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter
Affected: 1.2.0
CVE-2009-2126
–
1%
Jun 19
Cross-site scripting (XSS) vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the title (aka subject) field
Affected: through 1.2.0; 1.1.0
CVE-2009-2125
–
1%
Jun 19
delete_bug.php in Elvin before 1.2.1 does not require administrative privileges, which allows remote authenticated users to bypass intended access restrictions and delete…
Affected: through 1.2.0; 1.1.0
CVE-2009-2124
–
2%
Jun 19
Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary local files via a
Affected: 1.2.0
CVE-2009-2123
–
1%
Jun 19
Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) inUser (aka Username) and (2) inPass (aka Password)…
Affected: 1.2.0
Showing 9