CVE-2004-2564 Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, allow remote attackers to inject arbitrary web script or HTML via (1)....
MediumCVSS 4.3
EPSS 4.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in show.asp and (2) the title parameter in showperf.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sambar server | = 6.1-beta2 | No fix listed |
References
- 11748 exploit third-party-advisory vendor-advisory
- 1010353 exploit vdb-entry
- www.oliverkarow.de exploit
- 6583 exploit vdb-entry
- 6584 exploit vdb-entry
- 10444 exploit vdb-entry
- sambar-show-showperf-xss(16286) vdb-entry