The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a " <!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting (XSS) vulnerability.