Vulnerabilities

TI-2008-06692 CVE-2008-7004 · GHSA-5c5j-j5xj-c3ww

Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack…

MEDIUM 46

Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack vectors, possibly related to elog.c.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01678 Published 2009-08-19 No fix listed CWE-119

TI-2008-00420 CVE-2008-0445 · GHSA-g6jx-3h74-6fm8

The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows…

LOW 26

The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote attackers to cause a denial of service (infinite loop) via crafted logbook entries.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01428 Published 2008-01-24 No fix listed

TI-2008-00419 CVE-2008-0444 · GHSA-p383-332q-77v5

Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext parameter to unspecified components.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0125 Published 2008-01-24 No fix listed CWE-79

Vulnerabilities

Filters

Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack…

The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows…

Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows…