CVE

Id
8109  
CVE No.
CVE-2003-1285  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server before 6.0 beta 6 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) isapi/testisa.dll, (2) testcgi.exe, (3) environ.pl, (4) the query parameter to samples/search.dll, (5) the price parameter to mortgage.pl, (6) the query string in dumpenv.pl, (7) the query string to dumpenv.pl, and (8) the E-Mail field of the guestbook script (book.pl).  
Phase
Assigned (20051122)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
49099 8109 CVE-2003-1285 IDEFENSE:20030925 Sambar Server Multiple Vulnerabilities  View
49100 8109 CVE-2003-1285 URL:http://www.idefense.com/application/poi/display?id=103&type=vulnerabilities&flashstatus=true  View
49101 8109 CVE-2003-1285 CONFIRM:http://www.sambar.com/security.htm  View
49102 8109 CVE-2003-1285 OSVDB:5782  View
49103 8109 CVE-2003-1285 URL:http://www.osvdb.org/5782  View
49104 8109 CVE-2003-1285 OSVDB:5783  View
49105 8109 CVE-2003-1285 URL:http://www.osvdb.org/5783  View
49106 8109 CVE-2003-1285 OSVDB:5784  View
49107 8109 CVE-2003-1285 URL:http://www.osvdb.org/5784  View
49108 8109 CVE-2003-1285 OSVDB:5785  View
49109 8109 CVE-2003-1285 URL:http://www.osvdb.org/5785  View
49110 8109 CVE-2003-1285 OSVDB:5805  View
49111 8109 CVE-2003-1285 URL:http://www.osvdb.org/5805  View
49112 8109 CVE-2003-1285 SECTRACK:1007819  View
49113 8109 CVE-2003-1285 URL:http://securitytracker.com/id?1007819  View
49114 8109 CVE-2003-1285 SECUNIA:9578  View
49115 8109 CVE-2003-1285 URL:http://secunia.com/advisories/9578  View
49116 8109 CVE-2003-1285 XF:sambar-multiple-vulnerabilities(13305)  View
49117 8109 CVE-2003-1285 URL:http://xforce.iss.net/xforce/xfdb/13305  View
49118 8109 CVE-2003-1285 XF:sambar-multiple-xss(16056)  View

Related JVN