Total vulnerabilities in the database
Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine if a directory exists via a .. (dot dot) in the GET request, which returns different error messages depending on whether the directory exists or not.
Software | From | Fixed in |
---|---|---|
icecast / icecast | 1.3.12 | 1.3.12.x |