Unscored CVE-2008-0444 EUVD-2008-0454GHSA-p383-332q-77v5

Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject arbitrary web script o…

Published Jan 24, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext parameter to unspecified components.

References

28589 third-party-advisory
ADV-2008-0265 vdb-entry
41681 vdb-entry
http://midas.psi.ch/elog/download/ChangeLog
elog-subtext-xss(39828) vdb-entry
27399 vdb-entry