GCVE - cpe:2.3:a:stefan_ritt:elog_web

Approved changes feed: RSS · Atom

cpe:2.3:a:stefan_ritt:elog_web_logbook:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Stefan Ritt (`f15f9e48-42d5-50f2-bf3c-15bde171031f`)
Product	Elog Web Logbook (`bbcde101-92ef-5dc5-920c-6dd7bdfb9ca8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-7206`	vulnerable	2026-06-08 04:51:05.952409	Details available Unspecified vulnerability in Electronic Logbook (ELOG) before 2.7.2 has unknown impact and attack vectors when the "logbook contains HTML code," probably cross-site scripting (XSS). Published: 2009-09-11T16:00:00.000Z Updated: 2024-08-07T11:56:14.525Z Open on db.gcve.eu Reference links https://midas.psi.ch/elog/download/ChangeLog http://osvdb.org/41685 https://exchange.xforce.ibmcloud.com/vulnerabilities/40124 http://www.securityfocus.com/bid/27526	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6318`	vulnerable	2026-06-08 04:49:28.637578	Details available The show_elog_list function in elogd.c in elog 2.6.2 and earlier allows remote authenticated users to cause a denial of service (daemon crash) by attempting to access a logbook whose name begins with "global," which results in a NULL pointer dereference. NOTE: some of these details are obtained from third party information. Published: 2006-12-28T20:00:00.000Z Updated: 2024-08-07T20:19:35.184Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/4423 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=397875 http://secunia.com/advisories/23580 http://securitytracker.com/id?1017450 http://www.osvdb.org/30272	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5791`	vulnerable	2026-06-08 04:49:21.299128	Details available Multiple cross-site scripting (XSS) vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inject arbitrary HTML or web script via (1) the filename for downloading, which is not quoted in an error message by the send_file_direct function, and (2) the Type or Category values in a New entry, which is not properly handled in an error message by the submit_elog function. Published: 2006-11-07T23:00:00.000Z Updated: 2024-08-07T20:04:55.555Z Open on db.gcve.eu Reference links http://secunia.com/advisories/23580 https://exchange.xforce.ibmcloud.com/vulnerabilities/29986 http://www.securityfocus.com/bid/20881 http://www.debian.org/security/2006/dsa-1242 http://secunia.com/advisories/22638	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5790`	vulnerable	2026-06-08 04:49:21.298702	Details available Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) an entry with an attachment whose name contains format string specifiers (el_submit function), and possibly other vectors in the (2) receive_config, (3) show_rss_feed, (4) show_elog_list, (5) show_logbook_node, and (6) server_loop functions. Published: 2006-11-07T23:00:00.000Z Updated: 2024-08-07T20:04:55.583Z Open on db.gcve.eu Reference links http://secunia.com/advisories/23580 http://www.debian.org/security/2006/dsa-1242 http://www.securityfocus.com/bid/20876 https://exchange.xforce.ibmcloud.com/vulnerabilities/29987 http://secunia.com/advisories/22638	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Elog Web Logbook

Notes

PURL mappings

Vulnerability references

Contribute