Published: 31/12/2004 Updated: 11/07/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, allow remote malicious users to inject arbitrary web script or HTML via (1) the show parameter in show.asp and (2) the title parameter in showperf.asp.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sambar sambar server 6.1

source: wwwsecurityfocuscom/bid/10444/info Sambar Server is reportedly prone to multiple vulnerabilities These issues may allow an attacker to access sensitive files and carry out directory traversal and cross-site scripting attacks These issues require an attacker to have administrative privileges, however, it is reported that an admi ...

source: wwwsecurityfocuscom/bid/10444/info Sambar Server is reportedly prone to multiple vulnerabilities These issues may allow an attacker to access sensitive files and carry out directory traversal and cross-site scripting attacks These issues require an attacker to have administrative privileges, however, it is reported that an ad ...

NVD-CWE-Other http://www.oliverkarow.de/research/sambar.txt http://www.securityfocus.com/bid/10444 http://www.osvdb.org/6583 http://www.osvdb.org/6584 http://securitytracker.com/id?1010353 http://secunia.com/advisories/11748 https://exchange.xforce.ibmcloud.com/vulnerabilities/16286 https://nvd.nist.gov https://www.exploit-db.com/exploits/24161/

CVE-2004-2564

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect