Description
Cross-site scripting (XSS) vulnerability in analysis.cgi 1.44, as used in K's CGI Access Log Kaiseki (1) jcode.pl and (2) Jcode.pm, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- http://www.kumacchi.com/cgiroom/index.html
- JVN#72065744 third-party-advisory
- JVNDB-2008-000044 third-party-advisory
- JVN#46869708 third-party-advisory
- accesslogkaiseki-analysis-xss(46053) vdb-entry
- http://www.kumacchi.com/cgiroom/cgis/accesslogex/accesslogex.html
- JVNDB-2008-000043 third-party-advisory