← Database

CVE-2009-2125

MEDIUM CVSS: 4.0 Published: 2009-06-19 Modified: 2026-06-16

Description

delete_bug.php in Elvin before 1.2.1 does not require administrative privileges, which allows remote authenticated users to bypass intended access restrictions and delete arbitrary bugs.

Affected Platforms

Elvinbts Elvinbts

Weakness Type

CWE-264

References