CVE-2014-7248

Cross-site scripting XSS vulnerability in IPA iLogScanner 4.0 allows remote attackers to inject arbitrary web script or HTML by triggering a crafted entry in a log file...

CVE-2014-7248

CVE-2014-7248 affects IPA iLogScanner 4.0. The vulnerability is a cross-site scripting (CWE-79) flaw in how analysis results are processed/output to HTML, allowing a crafted log entry to inject arbitrary script or HTML into the resulting page. Root cause: improper handling when generating the HTM...