Elvin 1.2.0 allows remote attackers to read the PHP source code of (1) login.ei, (2) jump_bug.ei, or (3) create_account.ei in inc/ via a direct request.
References
Configurations
History
21 Nov 2024, 01:04
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.exploit-db.com/exploits/8953 - |
Information
Published : 2009-06-19 18:00
Updated : 2024-11-21 01:04
NVD link : CVE-2009-2130
Mitre link : CVE-2009-2130
CVE.ORG link : CVE-2009-2130
JSON object : View
Products Affected
elvinbts
- elvinbts
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor