CVE-2005-0440 | Vulnerability Database | Aqua Security

ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL.

Affected Software

Name	Vendor	Start Version	End Version
Elog_web_logbook	Stefan_ritt	2.0.0 (including)	2.0.0 (including)
Elog_web_logbook	Stefan_ritt	2.0.1 (including)	2.0.1 (including)
Elog_web_logbook	Stefan_ritt	2.0.2 (including)	2.0.2 (including)
Elog_web_logbook	Stefan_ritt	2.0.3 (including)	2.0.3 (including)
Elog_web_logbook	Stefan_ritt	2.0.4 (including)	2.0.4 (including)
Elog_web_logbook	Stefan_ritt	2.0.5 (including)	2.0.5 (including)
Elog_web_logbook	Stefan_ritt	2.1.0 (including)	2.1.0 (including)
Elog_web_logbook	Stefan_ritt	2.1.1 (including)	2.1.1 (including)
Elog_web_logbook	Stefan_ritt	2.1.2 (including)	2.1.2 (including)
Elog_web_logbook	Stefan_ritt	2.1.3 (including)	2.1.3 (including)
Elog_web_logbook	Stefan_ritt	2.2.0 (including)	2.2.0 (including)
Elog_web_logbook	Stefan_ritt	2.2.1 (including)	2.2.1 (including)
Elog_web_logbook	Stefan_ritt	2.2.2 (including)	2.2.2 (including)
Elog_web_logbook	Stefan_ritt	2.2.3 (including)	2.2.3 (including)
Elog_web_logbook	Stefan_ritt	2.2.4 (including)	2.2.4 (including)
Elog_web_logbook	Stefan_ritt	2.4 (including)	2.4 (including)
Elog_web_logbook	Stefan_ritt	2.5 (including)	2.5 (including)
Elog_web_logbook	Stefan_ritt	2.5.6 (including)	2.5.6 (including)

References

http://midas.psi.ch/elogs/Forum/941
http://sourceforge.net/project/shownotes.php?group_id=40505\u0026release_id=304880
http://www.securityfocus.com/bid/12556

NVD	https://nvd.nist.gov/vuln/detail/CVE-2005-0440
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html