JVN#82744714 Cross-site scripting vulnerability in apricot.php from LovPop.net

apricot.php from LovPop.net is a software to analyze web access logs. apricot.php contains a cross-site scripting vulnerability.

Note that future releases and maintenance of apricot.php ended on March 19, 2009. Users who wish to analyze access logs are recommended to use a different product that provides equivalent functionality.

Impact

An arbitrary script may be executed on the user’s web browser.

Solution

Do not use apricot.php
As patches will not be provided, users are recommended to discontinue use of apricot.php and switch to a different product that provides equivalent functionality.

Products Affected

• apricot.php