CVE-2006-3007: XSS
Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the DJ fields (1) Description, (2) URL, (3) Genre, (4) AIM, and (5) ICQ.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3007?
CVE-2006-3007 is considered a medium severity vulnerability due to its potential for remote exploitation via XSS.
How do I fix CVE-2006-3007?
The recommended fix for CVE-2006-3007 is to upgrade the SHOUTcast server to a version that eliminates these XSS vulnerabilities.
Which versions of SHOUTcast are affected by CVE-2006-3007?
CVE-2006-3007 affects SHOUTcast versions 1.8.3, 1.8.9, 1.9.2, 1.9.4, and 1.9.5 across multiple platforms including Win32, Mac OS X, Linux, FreeBSD, and Solaris.
What type of attacks can CVE-2006-3007 enable?
CVE-2006-3007 enables remote attackers to perform cross-site scripting (XSS) attacks, potentially leading to unauthorized access to user data.
Who is at risk from CVE-2006-3007?
Users and administrators running the vulnerable versions of SHOUTcast are at risk from the exploitation of CVE-2006-3007.