CVE-2019-20375

A cross-site scripting XSS vulnerability in Electronic Logbook ELOG 3.1.4 allows remote attackers to inject arbitrary web script or HTML via the value parameter in a localization loc command to elogd.c...

CVE-2019-20376

CVE-2019-20376 is a confirmed XSS vulnerability in Electronic Logbook (ELOG) 3.1.4. A remote attacker can inject arbitrary script/HTML via a crafted SVG document sent to elogd.c. Affected data exposure/impact is described as partial integrity impact with low confidentiality impact; CVSS metrics i...

Electronic Logbook (ELOG) Cross-Site Scripting Vulnerability (CNVD-2020-14077)

ELOG is a web application written in C by Stefan Ritt that can be used to create personal and frequently used logs. A cross-site scripting vulnerability exists in Electronic Logbook ELOG 3.1.4. A remote attacker can exploit this vulnerability by injecting arbitrary web script or HTML into elogd.c...

Electronic Logbook (ELOG) Cross-Site Scripting Vulnerability

ELOG is a web application written in C for creating personal and general logs. A cross-site scripting vulnerability exists in ELOG version 3.1.4. The vulnerability stems from the WEB application's lack of proper validation of client-side data. An attacker can exploit the vulnerability to execute...

CVE-2018-10737

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter...

CVE-2018-10737

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter...

elog incorrect authentication vulnerability

elog is a logging library written in the Erlang language that supports log hierarchies. A security vulnerability exists in elog version 3.1.1. A remote attacker can exploit the vulnerability to publish data on the logbook under an arbitrary user name...

CVE-2016-6342

elog 3.1.1 allows remote attackers to post data as any username in the logbook...

UBUNTU-CVE-2016-6342

elog 3.1.1 allows remote attackers to post data as any username in the logbook...

CVE-2016-6342

elog 3.1.1 allows remote attackers to post data as any username in the logbook...

Code injection

elog 3.1.1 allows remote attackers to post data as any username in the logbook...

CVE-2016-6342

Removed by vendor...

PT-2017-8970 · Elog · Elog

Name of the Vulnerable Software and Affected Versions: elog version 3.1.1 Description: The issue allows remote attackers to post data as any username in the logbook. Recommendations: For elog version 3.1.1, at the moment, there is no information about a newer version that contains a fix for this...

Diabeto Diabetes Logbook - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Diabeto Diabetes Logbook published at the 'play' market has multiple vulnerabilities...

mySugr Diabetes Logbook - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application mySugr Diabetes Logbook published at the 'play' market has multiple vulnerabilities...

GymRun Fitness Workout Logbook - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application GymRun Fitness Workout Logbook published at the 'play' market has multiple vulnerabilities...

Mileage Logbook - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mileage Logbook published at the 'play' market has multiple vulnerabilities...

MyLog GPS Trips Logbook - Customized SSL, Insecure KeyStore, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application MyLog GPS Trips Logbook published at the 'play' market has multiple vulnerabilities...

ELOG <= 2.5.6 - Remote Shell Exploit

No description provided by source. / Worked on latest version for me http://midas.psi.ch/elog/download/tar/elog-latest.tar.gz elog-latest.tar.gz 26-Jan-2005 21:36 519K Default port 8080. str0ke / / Hi there, someone has brought to u a gift. ELOG Remote Shell Exploit = 2.5.6 Also for future Versio...

Wordit Logbook 098b3 Logbook.pl Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7043/info A remote command execution vulnerability has been discovered in the Wordit Logbook application. This issue occurs due to insufficient sanitization of externally supplied data to the 'logbook.pl' script. A remote...