| Package | Affected versions | Patched versions |
|---|---|---|
| elog web logbook | = 2.0.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.1.0= 2.1.1= 2.1.2= 2.1.3= 2.2.0= 2.2.1= 2.2.2= 2.2.3= 2.2.4= 2.4= 2.5= 2.5.6 |
Buffer overflow in the decode_post function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via attachments with long file names.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free