VYPR
Unrated severityNVD Advisory· Published Oct 20, 2004· Updated Apr 16, 2026

CVE-2004-0781

CVE-2004-0781

Description

Cross-site scripting (XSS) vulnerability in list.cgi in the Icecast internal web server (icecast-server) 1.3.12 and earlier allows remote attackers to inject arbitrary web script via the UserAgent parameter.

Affected products

13
  • Icecast/Icecast13 versions
    cpe:2.3:a:icecast:icecast:1.3.0:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:icecast:icecast:1.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:icecast:icecast:1.3.10:*:*:*:*:*:*:*
    • cpe:2.3:a:icecast:icecast:1.3.10.1:*:*:*:*:*:*:*
    • cpe:2.3:a:icecast:icecast:1.3.11:*:*:*:*:*:*:*
    • cpe:2.3:a:icecast:icecast:1.3.12:*:*:*:*:*:*:*
    • cpe:2.3:a:icecast:icecast:1.3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:icecast:icecast:1.3.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:icecast:icecast:1.3.7:*:*:*:*:*:*:*
    • cpe:2.3:a:icecast:icecast:1.3.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:icecast:icecast:1.3.8:*:*:*:*:*:*:*
    • cpe:2.3:a:icecast:icecast:1.3.9:*:*:*:*:*:*:*
    • cpe:2.3:a:icecast:icecast:1.3.9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:icecast:icecast:1.3.9.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.