CVE-2006-3007: XSS
First published: Tue Jun 13 2006(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the DJ fields (1) Description, (2) URL, (3) Genre, (4) AIM, and (5) ICQ.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nullsoft SHOUTcast server | =1.8.9 | |
| Nullsoft SHOUTcast server | =1.9.4 | |
| Nullsoft SHOUTcast server | =1.9.5 | |
| Nullsoft SHOUTcast server | =1.8.9 | |
| Nullsoft SHOUTcast server | =1.9.5 | |
| Nullsoft SHOUTcast server | =1.8.3 | |
| Nullsoft SHOUTcast server | =1.7.1 | |
| Nullsoft SHOUTcast server | =1.8.9 | |
| Nullsoft SHOUTcast server | =1.9.5 | |
| Nullsoft SHOUTcast server | =1.9.4 | |
| Nullsoft SHOUTcast server | =1.9.4 | |
| Nullsoft SHOUTcast server | =1.9.2 | |
| Nullsoft SHOUTcast server | =1.8.9 | |
| Nullsoft SHOUTcast server | =1.8.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/18376
- http://secunia.com/advisories/20524
- http://www.gentoo.org/security/en/glsa/glsa-200607-05.xml
- http://secunia.com/advisories/21005
- http://www.vupen.com/english/advisories/2006/2254
- http://marc.info/?l=bugtraq&m=114980135615062&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27129
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/first-publish-date
- agent/description
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/nullsoft
- canonical/nullsoft shoutcast server
- version/nullsoft shoutcast server/1.8.9
- version/nullsoft shoutcast server/1.9.4
- version/nullsoft shoutcast server/1.9.5
- version/nullsoft shoutcast server/1.8.3
- version/nullsoft shoutcast server/1.7.1
- version/nullsoft shoutcast server/1.9.2