CVE-2006-2586: Iplogger

Medium severity, CVSS 5.8. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the HTTP_REFERER header in an HTTP request.

Affected products

Published 2006-05-25. Last modified 2026-06-16.