CVEvulnerability
CVE-2004-2564
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in show.asp and (2) the title parameter in showperf.asp.
Affected configurations
• sambar sambar server 6.1
References
- http://secunia.com/advisories/11748 Exploit, Vendor Advisory
- http://securitytracker.com/id?1010353 Exploit
- http://www.oliverkarow.de/research/sambar.txt Exploit
- http://www.osvdb.org/6583 Exploit
- http://www.osvdb.org/6584 Exploit
- http://www.securityfocus.com/bid/10444 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16286 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/11748 Exploit, Vendor Advisory
- http://securitytracker.com/id?1010353 Exploit
- http://www.oliverkarow.de/research/sambar.txt Exploit
- http://www.osvdb.org/6583 Exploit
- http://www.osvdb.org/6584 Exploit
- http://www.securityfocus.com/bid/10444 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16286 exchange.xforce.ibmcloud.com