The remote host is running dasBlog, a .NET blog system. It is reported that
versions up to and including 1.6.0 are vulnerable to an HTML injection issue.
The application does not sanitize the Referer and User-Agent HTTP headers.
An attacker may use this weakness to include malicious code in the Activity
and Events Viewer which may be executed by an administrator displaying this
page.
Solution : Upgrade to the latest version of this software
Risk factor : Medium
