nullsoft shoutcast server 1.8.9 vulnerabilities and exploits

(subscribe to this query)

Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote malicious users to inject arbitrary HTML or web script via the DJ fields (1) Description, (2) URL, (3) Genre, (4) AIM, and (5) ICQ.

Nullsoft Shoutcast Server 1.8.9 Nullsoft Shoutcast Server 1.9.5 Nullsoft Shoutcast Server 1.7.1 Nullsoft Shoutcast Server 1.9.4 Nullsoft Shoutcast Server 1.8.3 Nullsoft Shoutcast Server 1.9.2

Directory traversal vulnerability in Nullsoft SHOUTcast DSP prior to 1.9.6 filters directory traversal sequences before decoding, which allows remote malicious users to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing &...

Nullsoft Shoutcast Server 1.8.3 Nullsoft Shoutcast Server 1.9.2 Nullsoft Shoutcast Server 1.8.9 Nullsoft Shoutcast Server 1.9.4 Nullsoft Shoutcast Server 1.9.5 Nullsoft Shoutcast Server 1.7.1 Nullsoft Shoutcast Server 1.8.2 Nullsoft Shoutcast Server

SHOUTcast 1.8.9 and previous versions allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable sc_serv.log file.

Nullsoft Shoutcast Server 1.8.9

Buffer overflow in SHOUTcast 1.8.9 and other versions prior to 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".

Nullsoft Shoutcast Server 1.8.9

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook