CVE-2006-0347

Directory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access arbitrary files outside of the elog directory via ../ (dot dot) sequences in the URL.

Affected Software

Name	Vendor	Start Version	End Version
Elog_web_logbook	Stefan_ritt	2.0.0 (including)	2.0.0 (including)
Elog_web_logbook	Stefan_ritt	2.0.1 (including)	2.0.1 (including)
Elog_web_logbook	Stefan_ritt	2.0.2 (including)	2.0.2 (including)
Elog_web_logbook	Stefan_ritt	2.0.3 (including)	2.0.3 (including)
Elog_web_logbook	Stefan_ritt	2.0.4 (including)	2.0.4 (including)
Elog_web_logbook	Stefan_ritt	2.0.5 (including)	2.0.5 (including)
Elog_web_logbook	Stefan_ritt	2.1.0 (including)	2.1.0 (including)
Elog_web_logbook	Stefan_ritt	2.1.1 (including)	2.1.1 (including)
Elog_web_logbook	Stefan_ritt	2.1.2 (including)	2.1.2 (including)
Elog_web_logbook	Stefan_ritt	2.1.3 (including)	2.1.3 (including)
Elog_web_logbook	Stefan_ritt	2.2.0 (including)	2.2.0 (including)
Elog_web_logbook	Stefan_ritt	2.2.1 (including)	2.2.1 (including)
Elog_web_logbook	Stefan_ritt	2.2.2 (including)	2.2.2 (including)
Elog_web_logbook	Stefan_ritt	2.2.3 (including)	2.2.3 (including)
Elog_web_logbook	Stefan_ritt	2.2.4 (including)	2.2.4 (including)
Elog_web_logbook	Stefan_ritt	2.4 (including)	2.4 (including)
Elog_web_logbook	Stefan_ritt	2.5 (including)	2.5 (including)
Elog_web_logbook	Stefan_ritt	2.5.6 (including)	2.5.6 (including)
Elog_web_logbook	Stefan_ritt	2.5.7 (including)	2.5.7 (including)
Elog_web_logbook	Stefan_ritt	2.6.0 (including)	2.6.0 (including)
Elog	Ubuntu	dapper	*
Elog	Ubuntu	devel	*
Elog	Ubuntu	edgy	*
Elog	Ubuntu	feisty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-0347
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References