CVE-2003-1587

CVE-2003-1587 describes a cross-site scripting (XSS) vulnerability in LoganPro where remote attackers can inject arbitrary script via a crafted User-Agent header. Affected component is the web application LoganPro; root cause is insufficient input validation/escaping for User-Agent. The CVSS v2 s...