 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| CVE ID: | CVE-2006-3007 |
| Description: | Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the DJ fields (1) Description, (2) URL, (3) Genre, (4) AIM, and (5) ICQ. |
| Test IDs: | 1.3.6.1.4.1.25623.1.0.57078 |
| Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2006-3007 BugTraq ID: 18376 http://www.securityfocus.com/bid/18376 Bugtraq: 20060608 bug of script injection in shoutcast servers (Google Search) http://marc.info/?l=bugtraq&m=114980135615062&w=2 http://www.gentoo.org/security/en/glsa/glsa-200607-05.xml http://secunia.com/advisories/20524 http://secunia.com/advisories/21005 http://www.vupen.com/english/advisories/2006/2254 XForce ISS Database: shoutcast-djfields-xss(27129) https://exchange.xforce.ibmcloud.com/vulnerabilities/27129 |