Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-2564

Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in show.asp and (2) the title parameter in showperf.asp.

Published

2004-12-31T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

2.9

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	sambar	sambar_server	6.1	Yes

References

http://secunia.com/advisories/11748 Exploit, Vendor Advisory ([email protected])
http://securitytracker.com/id?1010353 Exploit ([email protected])
http://www.oliverkarow.de/research/sambar.txt Exploit ([email protected])
http://www.osvdb.org/6583 Exploit ([email protected])
http://www.osvdb.org/6584 Exploit ([email protected])
http://www.securityfocus.com/bid/10444 Exploit ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/16286 ([email protected])
http://secunia.com/advisories/11748 Exploit, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1010353 Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://www.oliverkarow.de/research/sambar.txt Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/6583 Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/6584 Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/10444 Exploit (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/16286 (af854a3a-2127-422b-91ae-364da2661108)