CVE-2004-2564

2005-11-2202:00:00

mitre

www.cve.org

AI Score

5.9

Confidence

High

EPSS

0.005

Percentile

77.2%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in show.asp and (2) the title parameter in showperf.asp.

References

secunia.com/advisories/11748

securitytracker.com/id?1010353

www.oliverkarow.de/research/sambar.txt

www.osvdb.org/6583

www.osvdb.org/6584

www.securityfocus.com/bid/10444

exchange.xforce.ibmcloud.com/vulnerabilities/16286