CVE-2015-20130

Netsweeper versions prior to 4.0.11 and 4.1.0 before 4.1.5 are vulnerable to a reflected cross-site scripting (XSS) flaw in the webadmin/reporter/view_server_log.php component. The root cause is the lack of output encoding on the log request parameter , which allows remote attackers to inject and...