Secunia

A vulnerability in SHOUTcast can be exploited by a malicious person to conduct a XSS attack (Cross-Site Scripting) against an administrator.

The vulnerability is caused by an input validation error in the logging function. A malicious person can inject malicious script code into the log files by connecting to the SHOUTcast server on port 8001/tcp and supply malicious script code as a password. When an administrator views the log files using the web interface the script code will be executed.

Solution
Filter access to port 8001/tcp on the SHOUTcast server, allowing only trusted people to connect.

Provided and/or discovered by
ssingh10

Deep Links
Links available in Customer Area