CVE-2009-2123
elvinbts 1.2.0 - SQL Injection via Username or Password Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-2123. PoCs published by 599eme Man, SirGod.
AI-analyzed exploit summary This is a writeup detailing SQL injection and XSS vulnerabilities in Elvin BTS 1.2.2. It provides example URLs and payloads for exploitation but does not include functional exploit code.
Description
Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) inUser (aka Username) and (2) inPass (aka Password) parameters to (a) inc/login.ei, reachable through login.php; and the (3) id parameter to (b) show_bug.php and (c) show_activity.php. NOTE: it was later reported that vector 3c also affects 1.2.2.
Exploits (2)
This is a writeup detailing SQL injection and XSS vulnerabilities in Elvin BTS 1.2.2. It provides example URLs and payloads for exploitation but does not include functional exploit code.
This is a detailed technical writeup describing multiple vulnerabilities in Elvin BTS 1.2.0, including SQL injection, local file inclusion, authentication bypass, XSS, CSRF, and source code disclosure. It provides specific code snippets, vulnerable functions, and proof-of-concept examples for each vulnerability.