CVE

Id
24586  
CVE No.
CVE-2007-1229  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Nullsoft ShoutcastServer 1.9.7 allows remote attackers to inject arbitrary web script or HTML via the top-level URI on the Incoming interface (port 8001/tcp), which is not properly handled in the administrator interface when viewing the log file.  
Phase
Assigned (20070302)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
242527 24586 CVE-2007-1229 BUGTRAQ:20070227 Nullsoft ShoutcastServer Persistant XSS - 0day  View
242528 24586 CVE-2007-1229 URL:http://www.securityfocus.com/archive/1/archive/1/461474/100/0/threaded  View
242529 24586 CVE-2007-1229 FULLDISC:20070227 Nullsoft ShoutcastServer Persistant XSS - 0day  View
242530 24586 CVE-2007-1229 URL:http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0604.html  View
242531 24586 CVE-2007-1229 BID:22742  View
242532 24586 CVE-2007-1229 URL:http://www.securityfocus.com/bid/22742  View
242533 24586 CVE-2007-1229 VUPEN:ADV-2007-0775  View
242534 24586 CVE-2007-1229 URL:http://www.vupen.com/english/advisories/2007/0775  View
242535 24586 CVE-2007-1229 OSVDB:33793  View
242536 24586 CVE-2007-1229 URL:http://osvdb.org/33793  View
242537 24586 CVE-2007-1229 SECUNIA:24323  View
242538 24586 CVE-2007-1229 URL:http://secunia.com/advisories/24323  View
242539 24586 CVE-2007-1229 XF:shoutcast-admin-interface-xss(32726)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56499 JVNDB-2007-005191 SQLiteManager におけるクロスサイトスクリプティングの脆弱性 SQLiteManager には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-1231 24586 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005191.html  View