CVE-2009-2128

概要

参考情報

• bugs.elvinbts.org/show_bug.php · Patch
• secunia.com/advisories/35430 · Vendor Advisory

elvinbts のその他の脆弱性

• CVE-2009-2920中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Elvin 1.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1)…
• CVE-2009-2130中 5.0Elvin 1.2.0 allows remote attackers to read the PHP source code of (1) login.ei, (2) jump_bug.ei, or (3) create_account.ei in inc/ via a dir…
• CVE-2009-2129中 6.8Cross-site request forgery (CSRF) vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authentication of arbitrar…
• CVE-2009-2127中 4.3Cross-site scripting (XSS) vulnerability in show_activity.php in Elvin 1.2.0 allows remote attackers to inject arbitrary web script or HTML …
• CVE-2009-2126中 4.3Cross-site scripting (XSS) vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to inject arbitrary web script or HT…