First published: Tue Sep 14 2004(Updated: )
Cross-site scripting (XSS) vulnerability in list.cgi in the Icecast internal web server (icecast-server) 1.3.12 and earlier allows remote attackers to inject arbitrary web script via the UserAgent parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Hazelcast Jet | =1.3.10 | |
Hazelcast Jet | =1.3.11 | |
Hazelcast Jet | =1.3.9.1 | |
Hazelcast Jet | =1.3.9.2 | |
Hazelcast Jet | =1.3.5 | |
Hazelcast Jet | =1.3.0 | |
Hazelcast Jet | =1.3.7.1 | |
Hazelcast Jet | =1.3.12 | |
Hazelcast Jet | =1.3.9 | |
Hazelcast Jet | =1.3.5.1 | |
Hazelcast Jet | =1.3.7 | |
Hazelcast Jet | =1.3.10.1 | |
Hazelcast Jet | =1.3.8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-0781 has a medium severity level due to its potential to allow cross-site scripting attacks.
To fix CVE-2004-0781, you should upgrade to a newer version of Icecast that is not affected by this vulnerability.
CVE-2004-0781 exploits a cross-site scripting vulnerability in the UserAgent parameter of the Icecast internal web server.
CVE-2004-0781 affects Icecast versions 1.3.0 to 1.3.12 inclusive.
CVE-2004-0781 can potentially target users of the Icecast web server who may unknowingly execute malicious scripts.