CVE-2004-2564

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in show.asp and (2) the title parameter in showperf.asp.

Ссылки

http://secunia.com/advisories/11748
Exploit
Vendor Advisory
http://securitytracker.com/id?1010353
Exploit
http://www.oliverkarow.de/research/sambar.txt
Exploit
http://www.osvdb.org/6583
Exploit
http://www.osvdb.org/6584
Exploit
http://www.securityfocus.com/bid/10444
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/16286
http://secunia.com/advisories/11748
Exploit
Vendor Advisory
http://securitytracker.com/id?1010353
Exploit
http://www.oliverkarow.de/research/sambar.txt
Exploit
http://www.osvdb.org/6583
Exploit
http://www.osvdb.org/6584
Exploit
http://www.securityfocus.com/bid/10444
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/16286

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sambar:sambar_server:6.1:beta2:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.04733

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-2v97-q484-q665

github

больше 4 лет назад