CVE-2008-7206

Unspecified vulnerability in Electronic Logbook (ELOG) before 2.7.2 has unknown impact and attack vectors when the "logbook contains HTML code," probably cross-site scripting (XSS).

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2009-09-11

Last modified

2024-08-07

Weaknesses

CWE-79

Affected products

• Elog Web Logbook (Stefan Ritt)

References

• http://osvdb.org/41685
• http://www.securityfocus.com/bid/27526
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40124
• https://midas.psi.ch/elog/download/ChangeLog