CVE-2009-2128

SQL injection vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the title (aka subject) field

published June 19, 2009

CVSS
—
EPSS
1%
Percentile
62.3
In the wild
Unconfirmed
What it is

SQL injection vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the title (aka subject) field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01001 · 62.3th percentile
Published
2009-06-19T17:32Z
EPSS history
Timeline
  • 19 JUN 17:32Z
    SQL injection vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the title (aka subject) field
    cvelistv5