Skip to content

CVE-2009-2124 Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter.

HighCVSS 7.5 EPSS 2.3%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter.

Affected products

ProductAffected versionsFixed in
elvinbts = 1.2.0 No fix listed

References

  • 35486 third-party-advisory vendor-advisory
  • 8953 exploit