This host has ELOG installed and is prone to cross-site scripting vulnerability.

Attackers can exploit this issue to steal cookie-based authentication credentials by conducting Cross-Site Scripting attacks on the affected system. Impact Level: System/Application

Upgrade ELOG Version to 2.7.2 or later. https://midas.psi.ch/elog/download/

An error occurs while processing malicious user supplied data passed into the 'logbook' module and can be exploited to inject arbitrary HTML and script code in the context of the affected application.

ELOG versions prior to 2.7.2

• http://osvdb.org/41685
• http://xforce.iss.net/xforce/xfdb/40124
• https://midas.psi.ch/elog/download/ChangeLog

---

Updated on 2015-03-25