CVSS: 7.8EPSS: 1%CPEs: 19EXPL: 3CVE-2006-3534
https://notcve.org/view.php?id=CVE-2006-3534
12 Jul 2006 — Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing "/content". Vulnerabilidad de salto de directorio en Nullsoft SHOUTcast DSP versiones anteriores a la 1.9.6, filtra secuencias de salto de directorio antes de decodificarse, lo que permite a atacantes remotos leer ficheros de su elección a t... • http://bugs.gentoo.org/show_bug.cgi?id=136721 •
CVSS: 6.1EPSS: 0%CPEs: 14EXPL: 0CVE-2006-3007
https://notcve.org/view.php?id=CVE-2006-3007
13 Jun 2006 — Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the DJ fields (1) Description, (2) URL, (3) Genre, (4) AIM, and (5) ICQ. Múltiples vulnerabilidades de XSS en SHOUTcast 1.9.5 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de los campos DJ (1) Description, (2) URL, (3) Genre, (4) AIM y (5) ICQ. • http://marc.info/?l=bugtraq&m=114980135615062&w=2 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2001-1304
https://notcve.org/view.php?id=CVE-2001-1304
03 Aug 2001 — Buffer overflow in SHOUTcast Server 1.8.2 allows remote attackers to cause a denial of service (crash) via several HTTP requests with a long (1) user-agent or (2) host HTTP header. • http://archives.neohapsis.com/archives/bugtraq/2001-08/0048.html •