CVE-2006-0347

Published: Jan 21, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access arbitrary files outside of the elog directory via "../" (dot dot) sequences in the URL.

Affected (20)

Products: Stefan Ritt: Elog Web Logbook

Stefan Ritt

1 product

Elog Web Logbook

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Stefan Ritt Elog Web Logbook	Version 2.0.0
Stefan Ritt Elog Web Logbook	Version 2.0.1
Stefan Ritt Elog Web Logbook	Version 2.0.2
Stefan Ritt Elog Web Logbook	Version 2.0.3
Stefan Ritt Elog Web Logbook	Version 2.0.4
Stefan Ritt Elog Web Logbook	Version 2.0.5
Stefan Ritt Elog Web Logbook	Version 2.1.0
Stefan Ritt Elog Web Logbook	Version 2.1.1
Stefan Ritt Elog Web Logbook	Version 2.1.2
Stefan Ritt Elog Web Logbook	Version 2.1.3
Stefan Ritt Elog Web Logbook	Version 2.2.0
Stefan Ritt Elog Web Logbook	Version 2.2.1
Stefan Ritt Elog Web Logbook	Version 2.2.2
Stefan Ritt Elog Web Logbook	Version 2.2.3
Stefan Ritt Elog Web Logbook	Version 2.2.4
Stefan Ritt Elog Web Logbook	Version 2.4
Stefan Ritt Elog Web Logbook	Version 2.5.6
Stefan Ritt Elog Web Logbook	Version 2.5.7
Stefan Ritt Elog Web Logbook	Version 2.5
Stefan Ritt Elog Web Logbook	Version 2.6.0