← Back

Modlogan

modlogan

Vendor: Modlogan • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Modlogan
1Modlogan
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
The processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a symlink attack on files specified as hostnames in a log file.
1Modlogan
1Modlogan
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
Directory traversal vulnerability in processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a .. (dot dot) in the hostname of a log...Show more
Directory traversal vulnerability in processor_web plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a .. (dot dot) in the hostname of a log entry.Show less