How severe is CVE-2006-5791?

CVE-2006-5791 has a CVSS 2.0 base score of 2.6, rated low severity.

Is CVE-2006-5791 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (69th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2006-5791?

CVE-2006-5791 affects Stefan Ritt Elog Web Logbook. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2006-5791?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2006-5791 published?

CVE-2006-5791 was published on 2006-11-07 and last updated on 2026-06-16.

CVE-2006-5791

CVE-2006-5791 is a low-severity vulnerability in Stefan Ritt Elog Web Logbook with a CVSS 2.0 base score of 2.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Low (CVSS 2.0 base score 2.6)
EPSS exploit prediction: 1% (69th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Stefan Ritt Elog Web Logbook
Published: 2006-11-07
Last modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inject arbitrary HTML or web script via (1) the filename for downloading, which is not quoted in an error message by the send_file_direct function, and (2) the Type or Category values in a New entry, which is not properly handled in an error message by the submit_elog function.

Frequently asked questions

What is CVE-2006-5791?: Multiple cross-site scripting (XSS) vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inject arbitrary HTML or web script via (1) the filename for downloading, which is not quoted in an error message by the send_file_direct function, and (2) the Type or Category values in a New entry, which is not properly handled in an error message by the submit_elog function.
How severe is CVE-2006-5791?: CVE-2006-5791 has a CVSS 2.0 base score of 2.6, rated low severity.
Is CVE-2006-5791 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (69th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2006-5791?: CVE-2006-5791 affects Stefan Ritt Elog Web Logbook. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2006-5791?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2006-5791 published?: CVE-2006-5791 was published on 2006-11-07 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:stefan_ritt:elog_web_logbook:*:*:*:*:*:*:*:*

More vulnerabilities in Stefan Ritt Elog Web Logbook

CVE-2006-5790 — High (CVSS 7.5): Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of…
CVE-2006-0598 — High (CVSS 7.5): Buffer overflow in elogd.c in elog before 2.5.7 r1558-4 allows attackers to execute code via unspecified variables,…
CVE-2006-0597 — High (CVSS 7.5): Multiple stack-based buffer overflows in elogd.c in elog before 2.5.7 r1558-4 allow attackers to cause a denial of…
CVE-2005-0439 — High (CVSS 7.5): Buffer overflow in the decode_post function in ELOG before 2.5.7 allows remote attackers to execute arbitrary code via…
CVE-2005-0440 — High (CVSS 7.5): ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a…
CVE-2006-5063 — Medium (CVSS 5.1): Cross-site scripting (XSS) vulnerability in Elog 2.6.1 allows remote attackers to inject arbitrary web script or HTML…

All CVEs affecting Stefan Ritt Elog Web Logbook →