CVE-2014-4166

Cross-site scripting XSS vulnerability in the song history in SHOUTcast DNAS 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the mp3 title field...

CVE-2014-4166

CVE-2014-4166 is an XSS vulnerability in SHOUTcast DNAS 2.2.1, enabling remote attackers to inject arbitrary web script or HTML via the mp3 title field in the song history. The available sources confirm the affected product/version and the vulnerability class, but do not provide details on exploi...