Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2124. PoCs published by SirGod.
AI-analyzed exploit summary This is a detailed technical writeup describing multiple vulnerabilities in Elvin BTS 1.2.0, including SQL injection, local file inclusion, authentication bypass, XSS, CSRF, and source code disclosure. It provides specific code snippets, vulnerable functions, and proof-of-concept examples for each vulnerability.
Description
Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter.
Exploits (1)
This is a detailed technical writeup describing multiple vulnerabilities in Elvin BTS 1.2.0, including SQL injection, local file inclusion, authentication bypass, XSS, CSRF, and source code disclosure. It provides specific code snippets, vulnerable functions, and proof-of-concept examples for each vulnerability.