CVE-2009-2123

This is a detailed technical writeup describing multiple vulnerabilities in Elvin BTS 1.2.0, including SQL injection, local file inclusion, authentication bypass, XSS, CSRF, and source code disclosure. It provides specific code snippets, vulnerable functions, and proof-of-concept examples for each vulnerability.

This is a writeup detailing SQL injection and XSS vulnerabilities in Elvin BTS 1.2.2. It provides example URLs and payloads for exploitation but does not include functional exploit code.