Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ipcop | Ipcop | 1.4.1 (including) | 1.4.1 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=110197682705001\u0026w=2
- http://www.kurczaba.com/html/security/0411291.htm
- http://www.securityfocus.com/bid/11779
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18301
- http://marc.info/?l=bugtraq\u0026m=110197682705001\u0026w=2
- http://www.kurczaba.com/html/security/0411291.htm
- http://www.securityfocus.com/bid/11779
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18301