EUVD-2006-2558

Malware in sbrugna...

EUVD-2006-2585

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the HTTPREFERER header in an HTTP request...

CVE-2006-2586

Cross-site scripting XSS vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the HTTPREFERER header in an HTTP request...

CVE-2006-2586

Cross-site scripting XSS vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the HTTPREFERER header in an HTTP request...

CVE-2006-2586

IpLogger 1.7 and earlier is affected by an XSS vulnerability: remote attackers can inject arbitrary HTML/JavaScript via the HTTP_REFERER header in an HTTP request. The NVD entry confirms the issue for IpLogger 1.7 and earlier, with a base score of 5.8 (MEDIUM) and network attack vector. The docum...

IpLogger <= 1.7 XSS

IpLogger = 1.7 XSS Discovered by: Nomenumbra Date: 21/5/2006 impact:moderate potential privilege escalation,possible defacement tjthedj's IpLogger http://tjthedj.us/projects/iplogger/ suffers from XSS in a user's useragent. It is possible to construct a useragent containing javascript, thus being...

Cross site scripting

Cross-site scripting XSS vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the User-Agent useragent header in an HTTP request, which is not filtered when the log files are viewed...

CVE-2006-2558

Cross-site scripting XSS vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the User-Agent useragent header in an HTTP request, which is not filtered when the log files are viewed...

CVE-2006-2558

IpLogger vulnerable to cross-site scripting (XSS) in versions 1.7 and earlier. The issue arises from unfiltered User-Agent header content being written to log files and later rendered/viewed, enabling arbitrary HTML/script injection. Documented impact aligns with partial confidentiality and integ...