CVE-2004-0781

Опубликовано: 20 окт. 2004

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in list.cgi in the Icecast internal web server (icecast-server) 1.3.12 and earlier allows remote attackers to inject arbitrary web script via the UserAgent parameter.

Ссылки

http://www.debian.org/security/2004/dsa-541
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11021
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17086
http://www.debian.org/security/2004/dsa-541
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11021
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17086

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:icecast:icecast:1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:icecast:icecast:1.3.5:*:*:*:*:*:*:*

cpe:2.3:a:icecast:icecast:1.3.5.1:*:*:*:*:*:*:*

cpe:2.3:a:icecast:icecast:1.3.7:*:*:*:*:*:*:*

cpe:2.3:a:icecast:icecast:1.3.7.1:*:*:*:*:*:*:*

cpe:2.3:a:icecast:icecast:1.3.8:*:*:*:*:*:*:*

cpe:2.3:a:icecast:icecast:1.3.9:*:*:*:*:*:*:*

cpe:2.3:a:icecast:icecast:1.3.9.1:*:*:*:*:*:*:*

cpe:2.3:a:icecast:icecast:1.3.9.2:*:*:*:*:*:*:*

cpe:2.3:a:icecast:icecast:1.3.10:*:*:*:*:*:*:*

cpe:2.3:a:icecast:icecast:1.3.10.1:*:*:*:*:*:*:*

cpe:2.3:a:icecast:icecast:1.3.11:*:*:*:*:*:*:*

cpe:2.3:a:icecast:icecast:1.3.12:*:*:*:*:*:*:*

EPSS

Процентиль: 58%

0.00364

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-0781

ubuntu

больше 20 лет назад

CVE-2004-0781

debian

больше 20 лет назад

Cross-site scripting (XSS) vulnerability in list.cgi in the Icecast in ...

GHSA-2r9j-f6x6-6gpm

github

около 3 лет назад

EPSS

Процентиль: 58%

0.00364

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other