peter bassill · operator
$ cve CVE-2008-2814 JSON

CVE-2008-2814 EXPLOIT

4.3
MEDIUM · CVSS 2.0 · EPSS 1.2% (pctl 67)

Patch early

A public exploit exists.

Description

Cross-site scripting (XSS) vulnerability in WallCity-Server Shoutcast Admin Panel 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter to the login interface. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Scoring

CVSS4.3 (MEDIUM, v2.0)
VectorAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS1.2% — more likely to be exploited than 67% of all CVEs
WeaknessCWE-79
On CISA KEVno
Public exploityes
Published2008-06-23
Last modified2026-06-16

Affected (1)

VendorProduct
shoutcastadminwallcity-server shoutcast admin panel

Public exploits

SourceTitleDate
exploit-dbSHOUTcast Admin Panel 2.0 - 'page' Local File Inclusion2008-06-14

References

→ the Explorer  ·  watch your stack  ·  NVD