Cross site scripting

Cross-site scripting XSS vulnerability in WallCity-Server Shoutcast Admin Panel 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter to the login interface. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2008-2813

Directory traversal vulnerability in index.php in WallCity-Server Shoutcast Admin Panel 2.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

Directory traversal

Directory traversal vulnerability in index.php in WallCity-Server Shoutcast Admin Panel 2.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2814

CVE-2008-2814 is a documented XSS vulnerability affecting WallCity-Server Shoutcast Admin Panel 2.0. The issue is triggered via the username parameter to the login interface, allowing remote attackers to inject arbitrary web script or HTML into victims’ browsers. The available data confirm the vu...

CVE-2008-2814

Cross-site scripting XSS vulnerability in WallCity-Server Shoutcast Admin Panel 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter to the login interface. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2008-2813

The vulnerability CVE-2008-2813 affects the WallCity-Server Shoutcast Admin Panel 2.0. In index.php, a directory traversal flaw exists when magic_quotes_gpc is disabled, allowing an attacker to include and execute arbitrary local files by injecting a .. (dot dot) into the page parameter. This is ...

CVE-2008-2813

Directory traversal vulnerability in index.php in WallCity-Server Shoutcast Admin Panel 2.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

shoutcast-lfi.txt

============================================================ Shoutcast Admin Panel 2.0 Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

SHOUTcast Admin Panel 2.0 - 'page' Local File Inclusion

============================================================ Shoutcast Admin Panel 2.0 Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

SHOUTcast Admin Panel 2.0 - page Local File Inclusion

SHOUTcast Admin Panel 2.0 - page Local File Inclusion ============================================================ Shoutcast Admin Panel 2.0 Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | |||||||||...

Shoutcast Admin Panel 2.0 (page) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== Shoutcast Admin Panel 2.0 page Local File Inclusion Vulnerability ===================================================================...

Shoutcast Admin Panel 2.0 (page) Local File Inclusion Vulnerability

No description provided by source. ============================================================ Shoutcast Admin Panel 2.0 Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

SHOUTcast DNAS/Linux 1.9.4 Format String Remote Exploit

No description provided by source. / SHOUTcast DNAS/Linux v1.9.4 format string remote exploit / / Damian Put [email protected] Cyber-Crime Team www.CC-Team.org / / Tested on slackware 9.1 and 10.0 0xbf3feee0 / / When exploit only crash SHOUTcast we should calculate new address: / / / / bash-2.05b...

SHOUTcast Server Service Port Default Password

Binary data 4382.prm...

Default Password (changeme) for SHOUTcast Server Service Port

The remote SHOUTcast Server's service port is configured to use the default password to allow broadcasting content and administration. Knowing it, an attacker can gain administrative control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Nullsoft Shoutcast Server crossite scripting

Crossite scripting with web administration log...

Nullsoft SHOUTcast 1.9.7 - Logfile HTML Injection

Nullsoft SHOUTcast 1.9.7 - Logfile HTML Injection source: https://www.securityfocus.com/bid/22742/info Nullsoft SHOUTcast is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML...

Nullsoft SHOUTcast 1.9.7 - Logfile HTML Injection

source: https://www.securityfocus.com/bid/22742/info Nullsoft SHOUTcast is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of the...

Streamripper <= 1.61.25 HTTP Header Parsing Buffer Overflow Expl 2

Exploit for unknown platform in category remote exploits ===================================================================== Streamripper exploit.exe 80 0 public-release streamripper streamripper.exe http://127.0.0.1:80 Connecting... on other shell + client conneted! + exploit send check shell ...

Streamripper 1.61.25 - HTTP Header Parsing Buffer Overflow (1)

/ . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 29\08\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer .dMMMMMM.P dMM MMMMMM maybe I should go back...