CVE-2016-6342

elog 3.1.1 allows remote attackers to post data as any username in the logbook.