CVE-2006-2586

2006-05-2510:00:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.9%

JSON

Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the HTTP_REFERER header in an HTTP request.

References

www.vupen.com/english/advisories/2006/1937

exchange.xforce.ibmcloud.com/vulnerabilities/26643