PT-2009-2673 · Unknown · Electronic Logbook

Publicado 2009-09-11 · Atualizado 2017-08-17 · CVE-2008-7206

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Electronic Logbook (ELOG) versions prior to 2.7.2

Description The issue is related to an unspecified vulnerability, possibly cross-site scripting (XSS), that occurs when the logbook contains HTML code. This could potentially allow for unknown impact and attack vectors.

Recommendations For versions prior to 2.7.2, update to version 2.7.2 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-7206

Produtos afetados

Electronic Logbook

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-7206 · Nota de Segurança
• https://midas.psi.ch/elog/download/ChangeLog · Nota
• http://osvdb.org/41685 · Nota
• http://securityfocus.com/bid/27526 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40124 · Nota