Unscored CVE-2006-2558 EUVD-2006-2558GHSA-8fc8-h6p4-jv75

Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the…

Published May 24, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the User-Agent (useragent) header in an HTTP request, which is not filtered when the log files are viewed.

References

20246 third-party-advisory
20060523 Re: IpLogger <= 1.7 XSS mailing-list
iplogger-headers-xss(26643) vdb-entry
1016147 vdb-entry
ADV-2006-1937 vdb-entry
18086 vdb-entry
20060522 IpLogger <= 1.7 XSS mailing-list