Skip to content

CVE-2009-2127 Cross-site scripting (XSS) vulnerability in show_activity.php in Elvin 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

MediumCVSS 4.3 EPSS 1.2% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Cross-site scripting (XSS) vulnerability in show_activity.php in Elvin 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Affected products

ProductAffected versionsFixed in
elvinbts = 1.2.0 No fix listed

References

  • 35486 third-party-advisory vendor-advisory
  • 8953 exploit