Cross site scripting

2014-06-1618:55:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.5%

JSON

Cross-site scripting (XSS) vulnerability in the song history in SHOUTcast DNAS 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the mp3 title field.

CPENameOperatorVersion
dnaseq2.2.1

CPE	Name	Operator	Version
	dnas	eq	2.2.1

References

osvdb.org/show/osvdb/108052

packetstormsecurity.com/files/127074/SHOUTcast-DNAS-2.2.1-Cross-Site-Scripting.html

www.securityfocus.com/bid/68019

www.exploit-db.com/exploits/33714