Lucene search
MitreCVE-2006-5063HistorySep 28, 2006 - 12:07 a.m.
CVE-2006-5063
2006-09-2800:07:00
mitre
web.nvd.nist.gov
41
cve
2006
5063
elog
xss
vulnerability
remote attackers
web script
html
log entries
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
5.5
Confidence
High
EPSS
0.03
Percentile
90.9%
Cross-site scripting (XSS) vulnerability in Elog 2.6.1 allows remote attackers to inject arbitrary web script or HTML by editing log entries in HTML mode.
Affected configurations
Node
stefan_rittelog_web_logbookMatch2.6.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| stefan_ritt | elog_web_logbook | 2.6.1 | cpe:2.3:a:stefan_ritt:elog_web_logbook:2.6.1:*:*:*:*:*:*:* |
Related
debiancve
debiancve
CVE-2006-5063
2006-09-28 00:07:00
cvelist
cvelist
CVE-2006-5063
2006-09-28 00:00:00
nvd
nvd
CVE-2006-5063
2006-09-28 00:07:00
nessus
nessus
Debian DSA-1242-1 : elog - several vulnerabilities
2006-12-30 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-1242-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 1242-1 (elog)
2008-01-17 00:00:00
debian
debian
[SECURITY] [DSA 1242-1] New elog packages fix arbitrary code execution
2006-12-27 22:33:30
osv
osv
elog
2006-12-27 00:00:00
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
5.5
Confidence
High
EPSS
0.03
Percentile
90.9%
Related for CVE-2006-5063