CVE-2009-2130

Published: Jun 19, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Elvin 1.2.0 allows remote attackers to read the PHP source code of (1) login.ei, (2) jump_bug.ei, or (3) create_account.ei in inc/ via a direct request.

Affected (1)

Products: Elvinbts: Elvinbts

Elvinbts

1 product

Elvinbts

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Elvinbts Elvinbts	Version 1.2.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://www.exploit-db.com/exploits/8953

Source: cve@mitre.org

https://www.exploit-db.com/exploits/8953

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.