Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the User-Agent (useragent) header in an HTTP request, which is not filtered when the log files are viewed.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-2558
Credits & Attribution
No credits recorded in the NVD database.
References
- http://secunia.com/advisories/20246
- http://www.securityfocus.com/archive/1/435005/30/4740/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26643
- http://securitytracker.com/id?1016147
- http://www.vupen.com/english/advisories/2006/1937
- http://www.securityfocus.com/bid/18086
- http://www.securityfocus.com/archive/1/434822/100/0/threaded
Affected Vendor
iplogger
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.