Snapstream: Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script or HTML via a GET request containing a terminating '"' (double quote) character.
CVSS Score
4.3
EPSS Score
0.006
Published
2004-02-03
SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server.
CVSS Score
5.0
EPSS Score
0.036
Published
2001-07-26
Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot dot) attack in the requested URL.
CVSS Score
7.5
EPSS Score
0.039
Published
2001-07-26