CVE-2006-3007

medium

Description

Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the DJ fields (1) Description, (2) URL, (3) Genre, (4) AIM, and (5) ICQ.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27129

http://www.vupen.com/english/advisories/2006/2254

http://www.securityfocus.com/bid/18376

http://www.gentoo.org/security/en/glsa/glsa-200607-05.xml

http://secunia.com/advisories/21005

http://secunia.com/advisories/20524

http://marc.info/?l=bugtraq&m=114980135615062&w=2

Details

Source: Mitre, NVD

Published: 2006-06-13

Updated: 2025-04-03

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N