Approved changes feed: RSS · Atom

cpe:2.3:a:nullsoft:shoutcast_server:1.9.5:*:win32:*:*:*:*:*

part: a version: 1.9.5 update: *

VendorNullsoft (b6c4ca26-d59a-58af-acde-0a73d8b38fb7)
ProductShoutcast Server (ad3d973c-84ea-5dc8-967a-4a5a56b7c203)
Editionwin32
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3534 vulnerable 2026-06-08 04:49:09.593479 Details available
Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing "/content".
Published: 2006-07-12T21:00:00.000Z
Updated: 2024-08-07T18:30:34.341Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3007 vulnerable 2026-06-08 04:49:08.039208 Details available
Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the DJ fields (1) Description, (2) URL, (3) Genre, (4) AIM, and (5) ICQ.
Published: 2006-06-13T10:00:00.000Z
Updated: 2024-08-07T18:16:05.048Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.