Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

stefan ritt elog web logbook 2.5 vulnerabilities and exploits

(subscribe to this query)
755
VMScore
CVE-2005-0439
Buffer overflow in the decode_post function in ELOG prior to 2.5.7 allows remote malicious users to execute arbitrary code via attachments with long file names.
Stefan Ritt Elog Web Logbook 2.0.2Stefan Ritt Elog Web Logbook 2.0.3Stefan Ritt Elog Web Logbook 2.2.0Stefan Ritt Elog Web Logbook 2.2.1Stefan Ritt Elog Web Logbook 2.2.2Stefan Ritt Elog Web Logbook 2.0.0Stefan Ritt Elog Web Logbook 2.0.1Stefan Ritt Elog Web Logbook 2.1.2Stefan Ritt Elog Web Logbook 2.1.3Stefan Ritt Elog Web Logbook 2.5.6Stefan Ritt Elog Web Logbook 2.0.4Stefan Ritt Elog Web Logbook 2.0.5Stefan Ritt Elog Web Logbook 2.2.3Stefan Ritt Elog Web Logbook 2.2.4Stefan Ritt Elog Web Logbook 2.1.0Stefan Ritt Elog Web Logbook 2.1.1Stefan Ritt Elog Web Logbook 2.4Stefan Ritt Elog Web Logbook 2.5
668
VMScore
CVE-2005-0440
ELOG prior to 2.5.7 allows remote malicious users to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL.
Stefan Ritt Elog Web Logbook 2.0.2Stefan Ritt Elog Web Logbook 2.0.4Stefan Ritt Elog Web Logbook 2.2.1Stefan Ritt Elog Web Logbook 2.2.3Stefan Ritt Elog Web Logbook 2.0.0Stefan Ritt Elog Web Logbook 2.2.4Stefan Ritt Elog Web Logbook 2.4Stefan Ritt Elog Web Logbook 2.5Stefan Ritt Elog Web Logbook 2.5.6Stefan Ritt Elog Web Logbook 2.0.5Stefan Ritt Elog Web Logbook 2.1.0Stefan Ritt Elog Web Logbook 2.1.1Stefan Ritt Elog Web Logbook 2.1.2Stefan Ritt Elog Web Logbook 2.1.3Stefan Ritt Elog Web Logbook 2.0.1Stefan Ritt Elog Web Logbook 2.0.3Stefan Ritt Elog Web Logbook 2.2.0Stefan Ritt Elog Web Logbook 2.2.2
668
VMScore
CVE-2006-0597
Multiple stack-based buffer overflows in elogd.c in elog prior to 2.5.7 r1558-4 allow malicious users to cause a denial of service (application crash) and possibly execute code via long "revision attributes".
Stefan Ritt Elog Web Logbook 2.1.0Stefan Ritt Elog Web Logbook 2.0.2Stefan Ritt Elog Web Logbook 2.2.1Stefan Ritt Elog Web Logbook 2.5Stefan Ritt Elog Web Logbook 2.2.0Stefan Ritt Elog Web Logbook 2.2.4Stefan Ritt Elog Web Logbook 2.5.6Stefan Ritt Elog Web Logbook 2.2.3Stefan Ritt Elog Web Logbook 2.4Stefan Ritt Elog Web Logbook 2.1.2Stefan Ritt Elog Web Logbook 2.0.1Stefan Ritt Elog Web Logbook 2.0.4Stefan Ritt Elog Web Logbook 2.0.3Stefan Ritt Elog Web Logbook 2.1.3Stefan Ritt Elog Web Logbook 2.0.0Stefan Ritt Elog Web Logbook 2.1.1Stefan Ritt Elog Web Logbook 2.2.2Stefan Ritt Elog Web Logbook 2.0.5
668
VMScore
CVE-2006-0598
Buffer overflow in elogd.c in elog prior to 2.5.7 r1558-4 allows malicious users to execute code via unspecified variables, when writing to the log file.
Stefan Ritt Elog Web Logbook 2.1.0Stefan Ritt Elog Web Logbook 2.0.2Stefan Ritt Elog Web Logbook 2.2.1Stefan Ritt Elog Web Logbook 2.5Stefan Ritt Elog Web Logbook 2.2.0Stefan Ritt Elog Web Logbook 2.2.4Stefan Ritt Elog Web Logbook 2.5.6Stefan Ritt Elog Web Logbook 2.2.3Stefan Ritt Elog Web Logbook 2.4Stefan Ritt Elog Web Logbook 2.1.2Stefan Ritt Elog Web Logbook 2.0.1Stefan Ritt Elog Web Logbook 2.0.4Stefan Ritt Elog Web Logbook 2.0.3Stefan Ritt Elog Web Logbook 2.1.3Stefan Ritt Elog Web Logbook 2.0.0Stefan Ritt Elog Web Logbook 2.1.1Stefan Ritt Elog Web Logbook 2.2.2Stefan Ritt Elog Web Logbook 2.0.5
445
VMScore
CVE-2006-0599
The (1) elog.c and (2) elogd.c components in elog prior to 2.5.7 r1558-4 generate different responses depending on whether or not a username is valid, which allows remote malicious users to determine valid usernames.
Stefan Ritt Elog Web Logbook 2.1.0Stefan Ritt Elog Web Logbook 2.0.2Stefan Ritt Elog Web Logbook 2.2.1Stefan Ritt Elog Web Logbook 2.5Stefan Ritt Elog Web Logbook 2.2.0Stefan Ritt Elog Web Logbook 2.2.4Stefan Ritt Elog Web Logbook 2.5.6Stefan Ritt Elog Web Logbook 2.2.3Stefan Ritt Elog Web Logbook 2.4Stefan Ritt Elog Web Logbook 2.1.2Stefan Ritt Elog Web Logbook 2.0.1Stefan Ritt Elog Web Logbook 2.0.4Stefan Ritt Elog Web Logbook 2.0.3Stefan Ritt Elog Web Logbook 2.1.3Stefan Ritt Elog Web Logbook 2.0.0Stefan Ritt Elog Web Logbook 2.1.1Stefan Ritt Elog Web Logbook 2.2.2Stefan Ritt Elog Web Logbook 2.0.5
445
VMScore
CVE-2006-0600
elog prior to 2.5.7 r1558-4 allows remote malicious users to cause a denial of service (infinite redirection) via a request with the fail parameter set to 1, which redirects to the same request.
Stefan Ritt Elog Web Logbook 2.0.2Stefan Ritt Elog Web Logbook 2.0.3Stefan Ritt Elog Web Logbook 2.2.1Stefan Ritt Elog Web Logbook 2.2.2Stefan Ritt Elog Web Logbook 2.0.4Stefan Ritt Elog Web Logbook 2.0.5Stefan Ritt Elog Web Logbook 2.1.0Stefan Ritt Elog Web Logbook 2.2.3Stefan Ritt Elog Web Logbook 2.2.4Stefan Ritt Elog Web Logbook 2.0.0Stefan Ritt Elog Web Logbook 2.0.1Stefan Ritt Elog Web Logbook 2.1.3Stefan Ritt Elog Web Logbook 2.2.0Stefan Ritt Elog Web Logbook 2.5.6Stefan Ritt Elog Web Logbook 2.1.1Stefan Ritt Elog Web Logbook 2.1.2Stefan Ritt Elog Web Logbook 2.4Stefan Ritt Elog Web Logbook 2.5
445
VMScore
CVE-2006-6318
The show_elog_list function in elogd.c in elog 2.6.2 and previous versions allows remote authenticated users to cause a denial of service (daemon crash) by attempting to access a logbook whose name begins with "global," which results in a NULL pointer dereference. NOTE:...
Stefan Ritt Elog Web Logbook 2.0.5Stefan Ritt Elog Web Logbook 2.1.0Stefan Ritt Elog Web Logbook 2.2.3Stefan Ritt Elog Web Logbook 2.2.4Stefan Ritt Elog Web Logbook 2.0.1Stefan Ritt Elog Web Logbook 2.0.2Stefan Ritt Elog Web Logbook 2.1.3Stefan Ritt Elog Web Logbook 2.2.0Stefan Ritt Elog Web Logbook 2.5.6Stefan Ritt Elog Web Logbook 2.5.7Stefan Ritt Elog Web Logbook 2.0.3Stefan Ritt Elog Web Logbook 2.0.4Stefan Ritt Elog Web Logbook 2.2.1Stefan Ritt Elog Web Logbook 2.2.2Stefan Ritt Elog Web Logbook 2.6.0Stefan Ritt Elog Web Logbook 2.6.1Stefan Ritt Elog Web LogbookStefan Ritt Elog Web Logbook 2.0.0Stefan Ritt Elog Web Logbook 2.1.1Stefan Ritt Elog Web Logbook 2.1.2Stefan Ritt Elog Web Logbook 2.4Stefan Ritt Elog Web Logbook 2.5
383
VMScore
CVE-2008-7206
Unspecified vulnerability in Electronic Logbook (ELOG) prior to 2.7.2 has unknown impact and attack vectors when the "logbook contains HTML code," probably cross-site scripting (XSS).
Stefan Ritt Elog Web Logbook 2.0.1Stefan Ritt Elog Web Logbook 2.0.2Stefan Ritt Elog Web Logbook 2.1.2Stefan Ritt Elog Web Logbook 2.2.1Stefan Ritt Elog Web Logbook 2.5Stefan Ritt Elog Web Logbook 2.6.0Stefan Ritt Elog Web Logbook 2.0.3Stefan Ritt Elog Web Logbook 2.0.5Stefan Ritt Elog Web Logbook 2.2.0Stefan Ritt Elog Web Logbook 2.2.3Stefan Ritt Elog Web Logbook 2.5.7Stefan Ritt Elog Web Logbook 2.6.1Stefan Ritt Elog Web Logbook 2.6.2Stefan Ritt Elog Web Logbook 2.0.4Stefan Ritt Elog Web Logbook 2.1.1Stefan Ritt Elog Web Logbook 2.2.2Stefan Ritt Elog Web Logbook 2.4Stefan Ritt Elog Web LogbookStefan Ritt Elog Web Logbook 2.0.0Stefan Ritt Elog Web Logbook 2.1.0Stefan Ritt Elog Web Logbook 2.1.3Stefan Ritt Elog Web Logbook 2.2.4
445
VMScore
CVE-2006-0347
Directory traversal vulnerability in ELOG prior to 2.6.1 allows remote malicious users to access arbitrary files outside of the elog directory via "../" (dot dot) sequences in the URL.
Stefan Ritt Elog Web Logbook 2.0.0Stefan Ritt Elog Web Logbook 2.1.2Stefan Ritt Elog Web Logbook 2.1.3Stefan Ritt Elog Web Logbook 2.5Stefan Ritt Elog Web Logbook 2.5.6Stefan Ritt Elog Web Logbook 2.1.0Stefan Ritt Elog Web Logbook 2.1.1Stefan Ritt Elog Web Logbook 2.2.4Stefan Ritt Elog Web Logbook 2.4Stefan Ritt Elog Web Logbook 2.0.4Stefan Ritt Elog Web Logbook 2.0.5Stefan Ritt Elog Web Logbook 2.2.2Stefan Ritt Elog Web Logbook 2.2.3Stefan Ritt Elog Web Logbook 2.0.1Stefan Ritt Elog Web Logbook 2.0.2Stefan Ritt Elog Web Logbook 2.0.3Stefan Ritt Elog Web Logbook 2.2.0Stefan Ritt Elog Web Logbook 2.2.1Stefan Ritt Elog Web Logbook 2.5.7Stefan Ritt Elog Web Logbook 2.6.0
445
VMScore
CVE-2006-0348
Format string vulnerability in the write_logfile function in ELOG prior to 2.6.1 allows remote malicious users to cause a denial of service (server crash) via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third p...
Stefan Ritt Elog Web Logbook 2.0.3Stefan Ritt Elog Web Logbook 2.0.4Stefan Ritt Elog Web Logbook 2.0.5Stefan Ritt Elog Web Logbook 2.2.2Stefan Ritt Elog Web Logbook 2.2.3Stefan Ritt Elog Web Logbook 2.0.1Stefan Ritt Elog Web Logbook 2.0.2Stefan Ritt Elog Web Logbook 2.2.0Stefan Ritt Elog Web Logbook 2.2.1Stefan Ritt Elog Web Logbook 2.5.7Stefan Ritt Elog Web Logbook 2.6.0Stefan Ritt Elog Web Logbook 2.0.0Stefan Ritt Elog Web Logbook 2.1.2Stefan Ritt Elog Web Logbook 2.1.3Stefan Ritt Elog Web Logbook 2.5Stefan Ritt Elog Web Logbook 2.5.6Stefan Ritt Elog Web Logbook 2.1.0Stefan Ritt Elog Web Logbook 2.1.1Stefan Ritt Elog Web Logbook 2.2.4Stefan Ritt Elog Web Logbook 2.4
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook