CVE-2003-1586

CVE-2003-1586 describes a cross-site scripting (XSS) vulnerability in WebExpert, exploitable by remote attackers through a crafted User-Agent HTTP header. Affected: WebExpert (component/feature unspecified beyond XSS via User-Agent). Root cause: improper sanitization of the User-Agent header lead...