CVSS: 6.1EPSS: 3%CPEs: 1EXPL: 3CVE-2007-1229 – Nullsoft SHOUTcast 1.9.7 - Logfile HTML Injection
https://notcve.org/view.php?id=CVE-2007-1229
02 Mar 2007 — Cross-site scripting (XSS) vulnerability in the Nullsoft ShoutcastServer 1.9.7 allows remote attackers to inject arbitrary web script or HTML via the top-level URI on the Incoming interface (port 8001/tcp), which is not properly handled in the administrator interface when viewing the log file. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Nullsoft ShoutcastServer 1.9.7 permite a atacantes remotos inyectar scripts web o HTML de su elección mediante la URI top-level en el interfaz Incom... • https://www.exploit-db.com/exploits/29685 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-1999-1561
https://notcve.org/view.php?id=CVE-1999-1561
20 Aug 1999 — Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server. • http://www.securityfocus.com/archive/1/24852 •