Elvin BTS 'close_bug.php' Input Validation Vulnerability
BID:44413
Info
Elvin BTS 'close_bug.php' Input Validation Vulnerability
| Bugtraq ID: | 44413 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-2126 CVE-2009-2128 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 16 2009 12:00AM |
| Updated: | Jun 16 2009 12:00AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Elvin BTS Elvin BTS 1.2.0 |
| Not Vulnerable: |
Elvin BTS Elvin BTS 1.2.1 |
Discussion
Elvin BTS 'close_bug.php' Input Validation Vulnerability
Elvin BTS is prone to an input validation vulnerability that may allow attackers to perform cross-site scripting and SQL-injection attacks because it fails to properly sanitize user-supplied input.
Exploiting this issue may allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or exploit latent vulnerabilities in the underlying database; other attacks may also be possible.
Versions prior to Elvin BTS 1.2.1 are vulnerable.
Elvin BTS is prone to an input validation vulnerability that may allow attackers to perform cross-site scripting and SQL-injection attacks because it fails to properly sanitize user-supplied input.
Exploiting this issue may allow an attacker to compromise the application, access or modify data, steal cookie-based authentication credentials, or exploit latent vulnerabilities in the underlying database; other attacks may also be possible.
Versions prior to Elvin BTS 1.2.1 are vulnerable.
Solution / Fix
Elvin BTS 'close_bug.php' Input Validation Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.