August, 2004

Cross-Site Scripting (XSS) in Nihuo Web Log Analyzer
Author: Audun Larsen (larsen at xqus dot com)
Date: Aug 20, 2004

Affected software:
==================
Name: Nihuo Web Log Analyzer
URL: http://www.loganalyzer.net/index.html
Version: v1.6 (older versions not tested)
Released: Feb 17, 2004

Vendors description:
====================
Nihuo Web Log Analyzer can generate a wide range of reports and statistics from
your log file - more than 80 different reports with 2D and 3D graphs.

Introduction:
=============