Logan Pro HTTP Header Code Injection...

- AV AC AU C I A
发布: 2003-03-04
修订: 2025-04-13

A vulnerability has been discovered in Logan Pro. Under certain circumstances an attacker may embed HTML code into the HTTP header section of a web log entry. Due to insufficient sanitization of HTTP header information, Logan Pro reports that are derived from malicious web logs may incorporate the arbitrary attacker-supplied HTML code. This vulnerability was reported for Logan Pro version 1.2 previous versions may also be affected.

0%
暂无可用Exp或PoC
当前有0条受影响产品信息